kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 2 Releases Activity

bundles/nftables: add feature to block ips

Browse source
This commit is contained in:
Franzi 2024-01-21 11:44:13 +01:00
parent ee58509e93
commit bb56f0fb9a
Signed by: kunsi
GPG key ID: 12E3D2136B818350
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
bundles/nftables/files/nftables.conf
View file

@ -14,6 +14,13 @@ table inet filter {
iif lo accept
% for address in sorted(blocked_v4):
ip saddr ${address} drop
% endfor
% for address in sorted(blocked_v6):
ip6 saddr ${address} drop
% endfor
icmp type timestamp-request drop
icmp type timestamp-reply drop
ip protocol icmp accept