summaryrefslogtreecommitdiff
path: root/services
diff options
context:
space:
mode:
authorKenny Ballou <kballou@devnulllabs.io>2019-06-27 17:39:37 -0600
committerKenny Ballou <kballou@devnulllabs.io>2019-06-27 17:39:37 -0600
commita3f9d912731ff4a90ad48acbf21393aa6b1f4291 (patch)
treef07621acd09fd068be3c8a15631c2883714bdf69 /services
parent1347a8fc407921a8f6d5162b403070cc3b407e52 (diff)
downloadcfg.nix-a3f9d912731ff4a90ad48acbf21393aa6b1f4291.tar.gz
cfg.nix-a3f9d912731ff4a90ad48acbf21393aa6b1f4291.tar.xz
firewall: remove unnecessary chains
Signed-off-by: Kenny Ballou <kballou@devnulllabs.io>
Diffstat (limited to 'services')
-rw-r--r--services/nftables-rules.nft18
1 files changed, 0 insertions, 18 deletions
diff --git a/services/nftables-rules.nft b/services/nftables-rules.nft
index 75fefdb..7c805ab 100644
--- a/services/nftables-rules.nft
+++ b/services/nftables-rules.nft
@@ -51,15 +51,6 @@ table ip nat {
chain prerouting {
type nat hook prerouting priority 0; policy accept;
counter
- }
- chain input {
- type nat hook input priority 0; policy accept;
- counter
- }
- chain output {
- type nat hook output priority 0; policy accept;
- counter
- }
chain postrouting {
type nat hook postrouting priority 100; policy accept;
counter
@@ -70,15 +61,6 @@ table ip6 nat {
chain prerouting {
type nat hook prerouting priority 0; policy accept;
counter
- }
- chain input {
- type nat hook input priority 0; policy accept;
- counter
- }
- chain output {
- type nat hook output priority 0; policy accept;
- counter
- }
chain postrouting {
type nat hook postrouting priority 100; policy accept;
counter