blob: 0922a221bd6d7c94a008b406bad156d1ad6790ab (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
#!/bin/bash
set -e
RULESET="table ip x {
chain filter_in_tcp {
}
chain filter_in_udp {
}
chain y {
tcp dport vmap {
80 : accept,
81 : accept,
443 : accept,
}
tcp dport vmap {
8000-8100 : accept,
24000-25000 : accept,
}
meta l4proto tcp goto filter_in_tcp
meta l4proto udp goto filter_in_udp
log
}
}"
$NFT -o -f - <<< $RULESET
|
