blob: 89e5f42fc9f4d5c48720f59088a2253e2ed23bff (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
#!/bin/bash
set -e
RULESET="table inet filter {
flowtable ftable {
hook ingress priority 0; devices = { eno1, eno0, x };
}
chain forward {
type filter hook forward priority 0; policy drop;
ip protocol { tcp, udp } ct mark and 1 == 1 counter flow add @ftable
ip6 nexthdr { tcp, udp } ct mark and 2 == 2 counter flow add @ftable
ct mark and 30 == 30 ct state established,related log prefix \"nftables accept: \" level info accept
}
}"
$NFT -f - <<< "$RULESET" >/dev/null || exit 0
|
