firewall/ipv4-filter.nft

22 lines
620 B
Plaintext
Raw Normal View History

2024-09-10 18:20:33 -06:00
table filter {
2024-09-27 22:17:30 -06:00
chain input { type filter hook input priority 0;policy accept;}
chain forward { type filter hook forward priority 0;
iifname wg0 accept;
iifname home accept;
iifname eno1 accept;
ct status dnat accept;
}
2024-09-10 18:20:33 -06:00
chain output { type filter hook output priority 0; }
}
2024-09-27 14:33:34 -06:00
table inet t_nat {
chain prerouting { type nat hook prerouting priority -100; policy accept;}
chain postrouting { type nat hook postrouting priority 100;
2024-09-27 22:17:30 -06:00
iifname wg0 oifname eno1 masquerade;
iifname home oifname eno1 masquerade;
iifname eno1 oifname wg0 masquerade;
iifname eno1 oifname home masquerade;
}
2024-09-27 14:33:34 -06:00
}
2024-09-27 22:17:30 -06:00