Jeltz
64772b76e4
This is a fully static version of the config, and it is meant to be temporary (until I figure out a way to properly configure nftables using ansible…).
22 lines
294 B
Django/Jinja
22 lines
294 B
Django/Jinja
{{ ansible_managed | comment }}
|
|
|
|
table inet output {
|
|
|
|
chain conntrack {
|
|
ct state vmap {
|
|
established: counter accept,
|
|
related: counter accept,
|
|
invalid: counter drop,
|
|
}
|
|
}
|
|
|
|
chain output {
|
|
type filter hook output priority filter
|
|
policy accept
|
|
|
|
jump conntrack
|
|
|
|
counter
|
|
}
|
|
|
|
}
|