diff options
| -rw-r--r-- | files/nftables/Makefile.am | 4 | ||||
| -rw-r--r-- | files/nftables/ipv4-raw | 6 | ||||
| -rw-r--r-- | files/nftables/ipv6-raw | 6 |
3 files changed, 15 insertions, 1 deletions
diff --git a/files/nftables/Makefile.am b/files/nftables/Makefile.am index 1378e2b6..a4c7ac7c 100644 --- a/files/nftables/Makefile.am +++ b/files/nftables/Makefile.am @@ -5,9 +5,11 @@ dist_pkgsysconf_DATA = bridge-filter \ ipv4-filter \ ipv4-mangle \ ipv4-nat \ + ipv4-raw \ ipv6-filter \ ipv6-mangle \ - ipv6-nat + ipv6-nat \ + ipv6-raw install-data-hook: ${SED} -i 's|@sbindir[@]|${sbindir}/|g' ${DESTDIR}${pkgsysconfdir}/* diff --git a/files/nftables/ipv4-raw b/files/nftables/ipv4-raw new file mode 100644 index 00000000..19773ee8 --- /dev/null +++ b/files/nftables/ipv4-raw @@ -0,0 +1,6 @@ +#! @sbindir@nft -f + +table raw { + chain prerouting { type filter hook prerouting priority -300; } + chain output { type filter hook output priority -300; } +} diff --git a/files/nftables/ipv6-raw b/files/nftables/ipv6-raw new file mode 100644 index 00000000..5ee56a83 --- /dev/null +++ b/files/nftables/ipv6-raw @@ -0,0 +1,6 @@ +#! @sbindir@nft -f + +table ip6 raw { + chain prerouting { type filter hook prerouting priority -300; } + chain output { type filter hook output priority -300; } +} |