mirror of
https://github.com/unman/shaker.git
synced 2024-12-31 18:26:14 -05:00
11 lines
379 B
Bash
11 lines
379 B
Bash
|
cat /rw/config/qubes-firewall.d/update_nft.sh
|
||
|
|
#!/bin/sh
|
||
|
|
get_handle(){
|
||
|
|
local my_handle=$( nft -a list table $1|awk 'BEGIN{c0} /related,established/{c++; if (c==1) print $NF}' )
|
||
|
|
echo $my_handle
|
||
|
|
}
|
||
|
|
|
||
|
|
handle=$(get_handle filter)
|
||
|
|
nft add rule filter INPUT position $handle iifname "vif*" tcp dport 53 accept
|
||
|
|
nft add rule filter INPUT position $handle iifname "vif*" udp dport 53 accept
|