Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

restrict the outgoing traffic #6

Closed
wants to merge 2 commits into from
Closed

restrict the outgoing traffic #6

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
e56ea0d
restrict the outgoing traffic
Eslam-Nawara Sep 10, 2024
6cb4cb0
fix internet access problem
Eslam-Nawara Sep 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion cmds/modules/netlightd/nft/rules.nft
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,14 @@ table inet filter {
}

chain output {
type filter hook output priority filter; policy accept;
type filter hook output priority filter; policy accept;
ip daddr 192.168.123.32 accept
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what are these ips

ip daddr { 8.8.8.8, 1.1.1.1, 192.168.123.1 } udp dport 53 accept
ip daddr 192.168.123.32 tcp dport { 80, 443, 22 } accept
tcp dport 443 accept
ct state established,related accept
ip protocol icmp accept
meta nfproto ipv4 drop
}

chain prerouting {
Expand Down
Loading