Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-08-03 12:06:33 -04:00
Code Issues Projects Releases Packages Wiki Activity

nftables: add support for dnsdist control socket

Browse source
This commit is contained in:
Daniel Micay 2025-05-16 13:19:38 -04:00
parent e75172d57c
commit 5c41418606
2 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/nftables/nftables-ns1.conf
View file

@ -133,6 +133,8 @@ table inet filter {
skuid powerdns meta l4proto tcp th sport 81 th dport >= 1024 notrack accept
skuid dnsdist meta l4proto tcp th sport 5199 th dport >= 1024 notrack accept
skuid zerotier-one meta l4proto tcp th sport 9993 th dport >= 1024 notrack accept
skuid != root counter goto graceful-reject

2
etc/nftables/nftables-ns2.conf
View file

@ -131,6 +131,8 @@ table inet filter {
skuid powerdns meta l4proto tcp th sport 81 th dport >= 1024 notrack accept
skuid dnsdist meta l4proto tcp th sport 5199 th dport >= 1024 notrack accept
skuid != root counter goto graceful-reject
notrack accept
}