firewall.table.j2

2024-04-26 21:49:47 +04:00
parent ad7f4b6d13
commit 78b7d8a4a3
2 changed files with 23 additions and 6 deletions
@@ -1,23 +0,0 @@
-table inet firewall {
-
-    chain input {
-        type filter hook input priority 0; policy drop;
-
-        # established/related connections
-        ct state established,related accept
-
-        # loopback + lxdbr0 interface
-        iifname lo accept
-        iifname lxdbr0 accept
-
-        # icmp
-        icmp type echo-request accept
-
-        # allow mDNS
-        udp dport mdns accept
-
-        # allow SSH + GITEA + NGINX
-        tcp dport {22, 2222, 80, 443} accept
-    }
-
-}