diff --git a/nftables-web.conf b/nftables-web.conf index 78ec589..e02fbb6 100644 --- a/nftables-web.conf +++ b/nftables-web.conf @@ -49,7 +49,7 @@ table inet filter { chain output-internal { skuid unbound meta l4proto {tcp, udp} th sport 53 th dport >= 1024 accept - skuid {chrony, http} meta l4proto {tcp, udp} th sport >= 1024 th dport 53 accept + skuid chrony meta l4proto {tcp, udp} th sport >= 1024 th dport 53 accept skuid != root counter goto output-reject accept