blob: 8f78e8c606ec75b208cdf05ef73f500d688483e1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
#!/bin/bash
set -e
tmpfile1=$(mktemp -p .)
if [ ! -w $tmpfile1 ] ; then
echo "Failed to create tmp file" >&2
exit 0
fi
trap "rm -rf $tmpfile1" EXIT # cleanup if aborted
RULESET="table inet filter { }
include \"$tmpfile1\""
RULESET2="chain inet filter input2 {
type filter hook input priority filter; policy accept;
ip saddr 1.2.3.4 tcp dport { 22, 443, 123 } drop
}"
echo "$RULESET2" > $tmpfile1
$NFT -o -f - <<< $RULESET
|
