17 lines
435 B
Markdown
17 lines
435 B
Markdown
|
|
||
|
|
## v1.0
|
||
|
|
|
||
|
|
### Features
|
||
|
|
* Install `nftables` package for Debian based distros.
|
||
|
|
* Generate `nftables` main configuration file.
|
||
|
|
* Manage global, input and output chains with three dicts.
|
||
|
|
* Manage vars, sets and maps definition file.
|
||
|
|
* Restart `nftables` service.
|
||
|
|
|
||
|
|
### Default Rules
|
||
|
|
* Drop blackhole set input packets.
|
||
|
|
* Allow localhost traffic.
|
||
|
|
* Allow DHCP traffic.
|
||
|
|
* Allow SSH input (otherwise Ansible won't work).
|
||
|
|
* Allow DNS request.
|