Rollback to inet family (for ipv4 and ipv6).

This commit is contained in:
Jeremy Gardais 2017-08-09 15:01:35 +02:00
parent 2aafa3c320
commit 74d068a92c
3 changed files with 4 additions and 3 deletions

View File

@ -3,6 +3,7 @@
### Features
* Manage nftables service at startup.
* Rollback to inet family to manage both ipv4 and ipv6.
### Default Rules
* Use more sets and vars definitions to avoid multiple rules.

View File

@ -140,7 +140,7 @@ flush ruleset
include "/etc/nftables.d/defines.nft"
table ip firewall {
table inet firewall {
chain global {
# 000 state management
ct state established,related accept
@ -155,7 +155,7 @@ table ip firewall {
And you can get all rules and definitons by displaying the ruleset on the host: `$ nft list ruleset`:
```
table ip firewall {
table inet firewall {
set blackhole {
type ipv4_addr
elements = { 255.255.255.255, 224.0.0.1, 224.0.0.251}

View File

@ -9,7 +9,7 @@ flush ruleset
include "/etc/nftables.d/defines.nft"
table ip firewall {
table inet firewall {
chain global {
{% for group, rules in globalmerged|dictsort %}
# {{ group }}