pygos
/
build
mirror of https://github.com/pygos/build.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Update nftables ruleset syntax 

Apparently the tooling is now more strict in what syntax it accepts.

Signed-off-by: David Oberhollenzer <david.oberhollenzer@tele2.at>
This commit is contained in:
David Oberhollenzer 2019-01-11 14:06:54 +01:00
parent 8650c174f7
commit 9a49a8aac4
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
layer/router-alix/nftables.rules
View File

@ -6,7 +6,7 @@ table inet filter {
ip protocol icmp accept
ct state {established, related} accept
ct state established, related accept
ct state invalid drop
iifname lo accept

2
layer/router-rpi3/nftables.rules
View File

@ -4,7 +4,7 @@ table inet filter {
chain input {
type filter hook input priority 0; policy drop;
ct state {established, related} accept
ct state established, related accept
ct state invalid drop
iifname lo accept