nftables: drop nftables config
parent
01463a3a4f
commit
3ad7c69a56
|
@ -1,16 +0,0 @@
|
||||||
#!/usr/sbin/nft -f
|
|
||||||
|
|
||||||
flush ruleset
|
|
||||||
|
|
||||||
table inet filter {
|
|
||||||
chain input {
|
|
||||||
type filter hook input priority 0; policy drop;
|
|
||||||
|
|
||||||
iif lo accept comment "Accept any localhost traffic"
|
|
||||||
ct state established,related accept comment "Accept trafic originated from us"
|
|
||||||
|
|
||||||
meta l4proto { icmp, icmpv6 } accept comment "Accept ICMP/ICMPv6 traffic"
|
|
||||||
udp dport mdns accept comment "Accept mDNS"
|
|
||||||
tcp dport ipp accept comment "Accept IPP"
|
|
||||||
}
|
|
||||||
}
|
|
Loading…
Reference in New Issue