Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-01-03 11:00:49 -05:00
Code Issues Packages Projects Releases Wiki Activity

nftables: extend notrack rules for ADoT changes

Browse Source
This commit is contained in:
Daniel Micay 2024-01-19 12:51:35 -05:00
parent a954a4a024
commit 5ed0c02e99
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nftables-ns1.conf
View File

@ -8,7 +8,7 @@ table inet filter {
iif lo notrack accept iif lo notrack accept
udp dport 53 notrack accept udp dport 53 notrack accept
tcp dport {22, 53} notrack accept tcp dport {22, 53, 80, 443, 853} notrack accept
meta l4proto {icmp, ipv6-icmp} notrack accept meta l4proto {icmp, ipv6-icmp} notrack accept
} }
@ -17,7 +17,7 @@ table inet filter {
oif lo notrack accept oif lo notrack accept
udp sport 53 notrack accept udp sport 53 notrack accept
tcp sport {22, 53} notrack accept tcp sport {22, 53, 80, 443, 853} notrack accept
meta l4proto {icmp, ipv6-icmp} notrack accept meta l4proto {icmp, ipv6-icmp} notrack accept
} }

4
nftables-ns2.conf
View File

@ -8,7 +8,7 @@ table inet filter {
iif lo notrack accept iif lo notrack accept
udp dport 53 notrack accept udp dport 53 notrack accept
tcp dport {22, 53} notrack accept tcp dport {22, 53, 80, 443, 853} notrack accept
meta l4proto {icmp, ipv6-icmp} notrack accept meta l4proto {icmp, ipv6-icmp} notrack accept
} }
@ -17,7 +17,7 @@ table inet filter {
oif lo notrack accept oif lo notrack accept
udp sport 53 notrack accept udp sport 53 notrack accept
tcp sport {22, 53} notrack accept tcp sport {22, 53, 80, 443, 853} notrack accept
meta l4proto {icmp, ipv6-icmp} notrack accept meta l4proto {icmp, ipv6-icmp} notrack accept
} }