a2ea441692
- Install an improved sample config - Fix permissions of osf-related configs - rule: Fix for potential off-by-one in cmd_add_loc() - netlink_delinearize: Fix suspicious calloc() call - netlink: Avoid memleak in error path of netlink_delinearize_obj() - netlink: Avoid memleak in error path of netlink_delinearize_table() - netlink: Avoid memleak in error path of netlink_delinearize_chain() - netlink: Avoid memleak in error path of netlink_delinearize_set() - json: Drop pointless assignment in exthdr_expr_json() - evaluate: Mark fall through case in str2hooknum() - parser_json: Fix for memleak in tcp option error path - parser_bison: Fix for implicit declaration of isalnum - main: fix nft --help output fallout from 719e4427 - tests: add icmp/6 test where dependency should be left alone - payload: check icmp dependency before removing previous icmp expression Resolves: rhbz#1933117, rhbz#1938823, rhbz#1931790, rhbz#1964987, rhbz#1971600
17 lines
407 B
Plaintext
17 lines
407 B
Plaintext
# Sample configuration snippet for nftables service.
|
|
# Meant to be included by main.nft, not for direct use.
|
|
|
|
# a common table for both IPv4 and IPv6
|
|
table inet nftables_svc {
|
|
|
|
# base-chain for traffic forwarded by this host
|
|
# re-uses 'allow' chain from main.nft
|
|
chain FORWARD {
|
|
type filter hook forward priority filter + 20
|
|
policy accept
|
|
|
|
jump allow
|
|
reject with icmpx type host-unreachable
|
|
}
|
|
}
|