diff --git a/etc/nftables/nftables-ns1.conf b/etc/nftables/nftables-ns1.conf index 7d6c088..f801cf4 100644 --- a/etc/nftables/nftables-ns1.conf +++ b/etc/nftables/nftables-ns1.conf @@ -133,6 +133,8 @@ table inet filter { skuid powerdns meta l4proto tcp th sport 81 th dport >= 1024 notrack accept + skuid dnsdist meta l4proto tcp th sport 5199 th dport >= 1024 notrack accept + skuid zerotier-one meta l4proto tcp th sport 9993 th dport >= 1024 notrack accept skuid != root counter goto graceful-reject diff --git a/etc/nftables/nftables-ns2.conf b/etc/nftables/nftables-ns2.conf index c3b43d4..8ef6a59 100644 --- a/etc/nftables/nftables-ns2.conf +++ b/etc/nftables/nftables-ns2.conf @@ -131,6 +131,8 @@ table inet filter { skuid powerdns meta l4proto tcp th sport 81 th dport >= 1024 notrack accept + skuid dnsdist meta l4proto tcp th sport 5199 th dport >= 1024 notrack accept + skuid != root counter goto graceful-reject notrack accept }