33 lines
708 B
Plaintext
33 lines
708 B
Plaintext
flush ruleset
|
|
|
|
table inet firewall_and_nat {
|
|
chain samoojaverkko_input {
|
|
accept
|
|
}
|
|
chain wireguard_input {
|
|
accept
|
|
}
|
|
chain input {
|
|
type filter hook input priority filter; policy drop;
|
|
iifname lo accept
|
|
ct state invalid drop
|
|
ct state { established, related } accept
|
|
iifname wlp2s0 jump samoojaverkko_input
|
|
iifname wg0 jump wireguard_input
|
|
}
|
|
chain forward {
|
|
type filter hook forward priority filter; policy drop;
|
|
ct state invalid drop
|
|
ct state { established, related } accept
|
|
iifname wlp2s0 accept
|
|
iifname wg0 accept
|
|
}
|
|
chain output {
|
|
type filter hook output priority filter; policy accept;
|
|
}
|
|
chain nat_masquerade {
|
|
type nat hook postrouting priority srcnat;
|
|
oifname enp1s0 ip saddr 192.168.0.0/16 masquerade
|
|
}
|
|
}
|