Amazing-Mirror/FollieHiyuki-dotfiles
Amazing-Mirror/FollieHiyuki-dotfiles
1
0
Fork 0
mirror of https://git.disroot.org/FollieHiyuki/dotfiles.git synced 2024-12-11 00:28:32 -05:00
Code Issues Projects Releases Wiki Activity

nftables: move nat to another table for visibility

Browse Source
This commit is contained in:
FollieHiyuki 2021-06-22 02:12:04 +03:00
parent be68cfee94
commit f3f1096c3f
No known key found for this signature in database
GPG Key ID: 813CF484F4993419
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
system/etc/nftables.conf
View File

@ -34,11 +34,7 @@ table inet filter {
iifname "virbr0" counter reject with icmpx type port-unreachable
}
chain libvirt_postrouting {
ip saddr 192.168.122.0/24 ip daddr != 192.168.122.0/24 counter masquerade
}
# Default to drop all inbound traffic, unless they meet our criteria
# Default to drop all inbound traffic, unless they meet the criteria
chain input {
type filter hook input priority 0; policy drop;
@ -131,6 +127,12 @@ table inet filter {
counter comment "Count accepted packets"
#log prefix "[nftables] Outbound Accepted: " flags all counter accept
}
}
table inet nat {
chain libvirt_postrouting {
ip saddr 192.168.122.0/24 ip daddr != 192.168.122.0/24 counter masquerade
}
chain postrouting {
type nat hook postrouting priority 100; policy accept;