diff options
Diffstat (limited to 'daeva/nftables-rules.nft')
| -rw-r--r-- | daeva/nftables-rules.nft | 31 |
1 files changed, 0 insertions, 31 deletions
diff --git a/daeva/nftables-rules.nft b/daeva/nftables-rules.nft index 22ed7f9..8d78807 100644 --- a/daeva/nftables-rules.nft +++ b/daeva/nftables-rules.nft @@ -18,11 +18,6 @@ table inet filter { chain forward { type filter hook forward priority 0; policy drop; ct state established,related counter accept - ip saddr 172.16.0.0/12 ip daddr 0.0.0.0/8 counter accept - ip saddr 172.16.0.0/12 ip daddr 172.16.0.0/12 counter accept - iifname "docker0" oifname "enp0s25" counter accept - iifname "docker0" oifname "wlp2s0" counter accept - iifname "docker0" oifname != "docker0" counter accept counter } @@ -61,29 +56,3 @@ table inet filter { counter } } - -table ip nat { - chain prerouting { - type nat hook prerouting priority 0; - counter - } - chain postrouting { - type nat hook postrouting priority 100; - ip saddr 172.16.0.0/12 oifname enp0s25 counter masquerade - ip saddr 172.16.0.0/12 oifname wlp2s0 counter masquerade - counter - } -} - -table ip6 nat { - chain prerouting { - type nat hook prerouting priority 0; - counter - } - chain postrouting { - type nat hook postrouting priority 100; - ip6 saddr fcdd::/48 oifname enp0s25 counter masquerade - ip6 saddr fcdd::/48 oifname wlp2s0 counter masquerade - counter - } -} |