From: Antonio Ospite Date: Thu, 26 Apr 2018 13:00:09 +0000 (+0200) Subject: nftables-workstation.nft: set default policy to drop X-Git-Url: https://git.ao2.it/config/nftables.git/commitdiff_plain/a8a3ce6b575f8de21d2b325fbcb93e29ea51235a?hp=ed04a7f82c3cb040cab63414d1d7265b6f508de9 nftables-workstation.nft: set default policy to drop --- diff --git a/nftables-workstation.nft b/nftables-workstation.nft index 7261291..ecfb200 100644 --- a/nftables-workstation.nft +++ b/nftables-workstation.nft @@ -40,6 +40,7 @@ table inet filter { chain input { type filter hook input priority 0 + policy drop ct state established,related accept ct state invalid drop @@ -124,12 +125,16 @@ table inet filter { chain forward { type filter hook forward priority 0 + policy drop + limit rate 3/minute burst 10 packets log prefix "[FORWARD]: " counter reject } chain output { type filter hook output priority 0 + policy drop + counter accept } }