mirror of
https://github.com/sunknudsen/privacy-guides.git
synced 2025-02-23 09:13:56 +00:00
Replaced tabs with spaces
This commit is contained in:
parent
c8aa101cc3
commit
b86c6088d9
@ -65,38 +65,38 @@ $ cat << EOF > /etc/nftables.conf
|
|||||||
flush ruleset
|
flush ruleset
|
||||||
|
|
||||||
table ip firewall {
|
table ip firewall {
|
||||||
chain input {
|
chain input {
|
||||||
type filter hook input priority filter; policy drop;
|
type filter hook input priority filter; policy drop;
|
||||||
iif "lo" accept
|
iif "lo" accept
|
||||||
iif != "lo" ip daddr 127.0.0.0/8 drop
|
iif != "lo" ip daddr 127.0.0.0/8 drop
|
||||||
iifname "$NETWORK_INTERFACE" tcp dport { 22, 51413 } accept
|
iifname "$NETWORK_INTERFACE" tcp dport { 22, 51413 } accept
|
||||||
ct state established,related accept
|
ct state established,related accept
|
||||||
}
|
}
|
||||||
|
|
||||||
chain forward {
|
chain forward {
|
||||||
type filter hook forward priority filter; policy drop;
|
type filter hook forward priority filter; policy drop;
|
||||||
}
|
}
|
||||||
|
|
||||||
chain output {
|
chain output {
|
||||||
type filter hook output priority filter; policy drop;
|
type filter hook output priority filter; policy drop;
|
||||||
oif "lo" accept
|
oif "lo" accept
|
||||||
oifname "$NETWORK_INTERFACE" tcp dport { 80, 443, 51413, 57715 } accept
|
oifname "$NETWORK_INTERFACE" tcp dport { 80, 443, 51413, 57715 } accept
|
||||||
oifname "$NETWORK_INTERFACE" udp dport { 53, 123 } accept
|
oifname "$NETWORK_INTERFACE" udp dport { 53, 123 } accept
|
||||||
ct state established,related accept
|
ct state established,related accept
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
table ip6 firewall {
|
table ip6 firewall {
|
||||||
chain input {
|
chain input {
|
||||||
type filter hook input priority filter; policy drop;
|
type filter hook input priority filter; policy drop;
|
||||||
}
|
}
|
||||||
|
|
||||||
chain forward {
|
chain forward {
|
||||||
type filter hook forward priority filter; policy drop;
|
type filter hook forward priority filter; policy drop;
|
||||||
}
|
}
|
||||||
|
|
||||||
chain output {
|
chain output {
|
||||||
type filter hook output priority filter; policy drop;
|
type filter hook output priority filter; policy drop;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user