mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2025-01-03 11:00:49 -05:00
nftables: extend notrack rules for ADoT changes
This commit is contained in:
parent
a954a4a024
commit
5ed0c02e99
@ -8,7 +8,7 @@ table inet filter {
|
||||
|
||||
iif lo notrack accept
|
||||
udp dport 53 notrack accept
|
||||
tcp dport {22, 53} notrack accept
|
||||
tcp dport {22, 53, 80, 443, 853} notrack accept
|
||||
meta l4proto {icmp, ipv6-icmp} notrack accept
|
||||
}
|
||||
|
||||
@ -17,7 +17,7 @@ table inet filter {
|
||||
|
||||
oif lo notrack accept
|
||||
udp sport 53 notrack accept
|
||||
tcp sport {22, 53} notrack accept
|
||||
tcp sport {22, 53, 80, 443, 853} notrack accept
|
||||
meta l4proto {icmp, ipv6-icmp} notrack accept
|
||||
}
|
||||
|
||||
|
@ -8,7 +8,7 @@ table inet filter {
|
||||
|
||||
iif lo notrack accept
|
||||
udp dport 53 notrack accept
|
||||
tcp dport {22, 53} notrack accept
|
||||
tcp dport {22, 53, 80, 443, 853} notrack accept
|
||||
meta l4proto {icmp, ipv6-icmp} notrack accept
|
||||
}
|
||||
|
||||
@ -17,7 +17,7 @@ table inet filter {
|
||||
|
||||
oif lo notrack accept
|
||||
udp sport 53 notrack accept
|
||||
tcp sport {22, 53} notrack accept
|
||||
tcp sport {22, 53, 80, 443, 853} notrack accept
|
||||
meta l4proto {icmp, ipv6-icmp} notrack accept
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user