blob: 49b6f76c6a8df84bf1a5c2b758ca5d7c2a7a46e1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
#!/bin/bash
set -e
tmpfile1=$(mktemp -p .)
if [ ! -w $tmpfile1 ] ; then
echo "Failed to create tmp file" >&2
exit 0
fi
trap "rm -rf $tmpfile1" EXIT # cleanup if aborted
RULESET="table inet filter { }
include \"$tmpfile1\""
RULESET2="chain inet filter input2 {
type filter hook input priority filter; policy accept;
ip saddr 1.2.3.4 tcp dport { 22, 443, 123 } drop
}"
echo "$RULESET2" > $tmpfile1
RULESET3="create chain inet filter output2 {
type filter hook output priority filter; policy accept;
ip daddr 1.2.3.4 tcp dport { 22, 443, 123 } drop
}"
echo "$RULESET3" >> $tmpfile1
$NFT -o -f - <<< $RULESET
|
