Skip to content

Commit 6cb4cb0

Browse files
committed
fix internet access problem
1 parent e56ea0d commit 6cb4cb0

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

cmds/modules/netlightd/nft/rules.nft

+8-2
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,14 @@ table inet filter {
88
}
99

1010
chain output {
11-
type filter hook output priority filter; policy drop;
12-
ip daddr 192.168.1.1 accept # the router ip
11+
type filter hook output priority filter; policy accept;
12+
ip daddr 192.168.123.32 accept
13+
ip daddr { 8.8.8.8, 1.1.1.1, 192.168.123.1 } udp dport 53 accept
14+
ip daddr 192.168.123.32 tcp dport { 80, 443, 22 } accept
15+
tcp dport 443 accept
16+
ct state established,related accept
17+
ip protocol icmp accept
18+
meta nfproto ipv4 drop
1319
}
1420

1521
chain prerouting {

0 commit comments

Comments
 (0)