## v1.x ### Features * Manage nftables service at startup. * Rollback to inet family to manage both ipv4 and ipv6. ### Default Rules * Use more sets and vars definitions to avoid multiple rules. * Allow outgoing icmp. * Remove DHCP incoming packets. The connection is started by the host, don't need incoming rule. ## v1.0 ### Features * Install `nftables` package for Debian based distros. * Generate `nftables` main configuration file. * Manage global, input and output chains with three dicts. * Manage vars, sets and maps definition file. * Restart `nftables` service. ### Default Rules * Drop blackhole set input packets. * Allow localhost traffic. * Allow DHCP traffic. * Allow SSH input (otherwise Ansible won't work). * Allow DNS request.