diff options
author | Kenny Ballou <kballou@devnulllabs.io> | 2020-12-16 00:42:22 -0700 |
---|---|---|
committer | Kenny Ballou <kballou@devnulllabs.io> | 2020-12-16 00:43:43 -0700 |
commit | 34f6b85113141f4e6a0ceaf1c6d22a40d746ce2f (patch) | |
tree | e205adf9a33adc04ec744020136824eee7918759 /daeva/nftables-rules.nft | |
parent | a7477e7819f658bf58b11491c84bc16234663234 (diff) | |
download | cfg.nix-34f6b85113141f4e6a0ceaf1c6d22a40d746ce2f.tar.gz cfg.nix-34f6b85113141f4e6a0ceaf1c6d22a40d746ce2f.tar.xz |
daeva: complete configuration
Installation complete, luks container and boot loader configured.
Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
Diffstat (limited to 'daeva/nftables-rules.nft')
-rw-r--r-- | daeva/nftables-rules.nft | 31 |
1 files changed, 0 insertions, 31 deletions
diff --git a/daeva/nftables-rules.nft b/daeva/nftables-rules.nft index 22ed7f9..8d78807 100644 --- a/daeva/nftables-rules.nft +++ b/daeva/nftables-rules.nft @@ -18,11 +18,6 @@ table inet filter { chain forward { type filter hook forward priority 0; policy drop; ct state established,related counter accept - ip saddr 172.16.0.0/12 ip daddr 0.0.0.0/8 counter accept - ip saddr 172.16.0.0/12 ip daddr 172.16.0.0/12 counter accept - iifname "docker0" oifname "enp0s25" counter accept - iifname "docker0" oifname "wlp2s0" counter accept - iifname "docker0" oifname != "docker0" counter accept counter } @@ -61,29 +56,3 @@ table inet filter { counter } } - -table ip nat { - chain prerouting { - type nat hook prerouting priority 0; - counter - } - chain postrouting { - type nat hook postrouting priority 100; - ip saddr 172.16.0.0/12 oifname enp0s25 counter masquerade - ip saddr 172.16.0.0/12 oifname wlp2s0 counter masquerade - counter - } -} - -table ip6 nat { - chain prerouting { - type nat hook prerouting priority 0; - counter - } - chain postrouting { - type nat hook postrouting priority 100; - ip6 saddr fcdd::/48 oifname enp0s25 counter masquerade - ip6 saddr fcdd::/48 oifname wlp2s0 counter masquerade - counter - } -} |