urosm
/
dot
1
0
Fork 0
Code

.config/nftables.conf: update

main
urosm 2024-06-12 00:47:39 +02:00
parent e27c5cfe97
commit f4aba20d0b
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
.config/nftables.conf
View File

@ -5,11 +5,13 @@ flush ruleset
table inet filter { table inet filter {
chain input { chain input {
type filter hook input priority filter; policy drop; type filter hook input priority filter; policy drop;
# accept any localhost traffic
iif lo accept iif lo accept comment "Accept localhost traffic"
# accept traffic originated from us ct state invalid drop comment "Drop invalid connections"
ct state established,related accept ct state established,related accept comment "Accept established and related connections"
# accept neighbour discovery otherwise connectivity breaks meta l4proto { icmp, ipv6-icmp } accept comment "Accept ICMP/ICMPv6 traffic"
icmpv6 type { nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept ip protocol igmp accept comment "Accept IGMP traffic"
udp dport mdns accept comment "Accept mDNS"
} }
} }