Skip to content

Commit 4857c69

Browse files
committed
Add support for jump-resources
1 parent 7311137 commit 4857c69

13 files changed

Lines changed: 941 additions & 126 deletions

File tree

Cargo.lock

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

doc/nftables.conf

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,16 @@ table inet filter {
1313
# letmeind will dynamically insert 'accept' rules here for the leases.
1414
}
1515

16+
chain LETMEIN-FORWARD {
17+
# This chain will be managed and filled by letmeind.
18+
# Do NOT put manual rules here.
19+
}
20+
21+
chain LETMEIN-OUTPUT {
22+
# This chain will be managed and filled by letmeind.
23+
# Do NOT put manual rules here.
24+
}
25+
1626
chain INPUT {
1727
type filter hook input priority filter; policy drop;
1828

@@ -36,6 +46,8 @@ table inet filter {
3646

3747
# Put your static rules here...
3848

49+
jump LETMEIN-FORWARD # Jump to letmein dynamic rules.
50+
3951
reject
4052
}
4153

@@ -48,6 +60,8 @@ table inet filter {
4860
meta l4proto ipv6-icmp accept
4961
meta l4proto icmp accept
5062

63+
jump LETMEIN-OUTPUT # Jump to letmein dynamic rules.
64+
5165
# TODO: Put your static rules here...
5266
meta l4proto udp accept # Accept all outgoing UDP.
5367
meta l4proto tcp accept # Accept all outgoing TCP.

0 commit comments

Comments
 (0)