summaryrefslogtreecommitdiff
path: root/daeva/nftables-rules.nft
diff options
context:
space:
mode:
authorKenny Ballou <kballou@devnulllabs.io>2020-12-16 00:42:22 -0700
committerKenny Ballou <kballou@devnulllabs.io>2020-12-16 00:43:43 -0700
commit34f6b85113141f4e6a0ceaf1c6d22a40d746ce2f (patch)
treee205adf9a33adc04ec744020136824eee7918759 /daeva/nftables-rules.nft
parenta7477e7819f658bf58b11491c84bc16234663234 (diff)
downloadcfg.nix-34f6b85113141f4e6a0ceaf1c6d22a40d746ce2f.tar.gz
cfg.nix-34f6b85113141f4e6a0ceaf1c6d22a40d746ce2f.tar.xz
daeva: complete configuration
Installation complete, luks container and boot loader configured. Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
Diffstat (limited to 'daeva/nftables-rules.nft')
-rw-r--r--daeva/nftables-rules.nft31
1 files changed, 0 insertions, 31 deletions
diff --git a/daeva/nftables-rules.nft b/daeva/nftables-rules.nft
index 22ed7f9..8d78807 100644
--- a/daeva/nftables-rules.nft
+++ b/daeva/nftables-rules.nft
@@ -18,11 +18,6 @@ table inet filter {
chain forward {
type filter hook forward priority 0; policy drop;
ct state established,related counter accept
- ip saddr 172.16.0.0/12 ip daddr 0.0.0.0/8 counter accept
- ip saddr 172.16.0.0/12 ip daddr 172.16.0.0/12 counter accept
- iifname "docker0" oifname "enp0s25" counter accept
- iifname "docker0" oifname "wlp2s0" counter accept
- iifname "docker0" oifname != "docker0" counter accept
counter
}
@@ -61,29 +56,3 @@ table inet filter {
counter
}
}
-
-table ip nat {
- chain prerouting {
- type nat hook prerouting priority 0;
- counter
- }
- chain postrouting {
- type nat hook postrouting priority 100;
- ip saddr 172.16.0.0/12 oifname enp0s25 counter masquerade
- ip saddr 172.16.0.0/12 oifname wlp2s0 counter masquerade
- counter
- }
-}
-
-table ip6 nat {
- chain prerouting {
- type nat hook prerouting priority 0;
- counter
- }
- chain postrouting {
- type nat hook postrouting priority 100;
- ip6 saddr fcdd::/48 oifname enp0s25 counter masquerade
- ip6 saddr fcdd::/48 oifname wlp2s0 counter masquerade
- counter
- }
-}