1
0
Fork 0

nftables: drop nftables config

main
urosm 2024-09-21 18:05:13 +02:00
parent 01463a3a4f
commit 3ad7c69a56
1 changed files with 0 additions and 16 deletions

View File

@ -1,16 +0,0 @@
#!/usr/sbin/nft -f
flush ruleset
table inet filter {
chain input {
type filter hook input priority 0; policy drop;
iif lo accept comment "Accept any localhost traffic"
ct state established,related accept comment "Accept trafic originated from us"
meta l4proto { icmp, icmpv6 } accept comment "Accept ICMP/ICMPv6 traffic"
udp dport mdns accept comment "Accept mDNS"
tcp dport ipp accept comment "Accept IPP"
}
}