diff --git a/ipv4-filter.nft b/ipv4-filter.nft index 7d8c51f..a918e44 100644 --- a/ipv4-filter.nft +++ b/ipv4-filter.nft @@ -1,13 +1,21 @@ table filter { - set http_ratelimit { type ipv4_addr; timeout 1s; flags dynamic; } - chain input { type filter hook input priority 0;policy drop;} - chain forward { type filter hook forward priority 0;iifname wg0 accept; - iifname enp11s0 accept;ct status dnat accept;} + chain input { type filter hook input priority 0;policy accept;} + chain forward { type filter hook forward priority 0; + iifname wg0 accept; + iifname home accept; + iifname eno1 accept; + ct status dnat accept; + } chain output { type filter hook output priority 0; } } table inet t_nat { chain prerouting { type nat hook prerouting priority -100; policy accept;} chain postrouting { type nat hook postrouting priority 100; - iifname wg0 oifname enp11s0 masquerade;} + iifname wg0 oifname eno1 masquerade; + iifname home oifname eno1 masquerade; + iifname eno1 oifname wg0 masquerade; + iifname eno1 oifname home masquerade; + } } +