summaryrefslogtreecommitdiff
path: root/etc/nftables.conf
AgeCommit message (Collapse)Author
2025-07-25nft use iifname instead of iif for ipv6netXiao Pan
iif need the interface exist, iifname don't need, more see man nft. If use iif, after reboot when nft start, ipv6net interface seems do not exist, so nft will error and failed to start. Use iifname can fix this issue.
2025-07-24nft use /etc/services phantun port name instead of 59083 port numberXiao Pan
2025-07-24swgp go through phantun, more see vc notesXiao Pan
2025-07-13nft accept monerod-p2p port to forward to inspXiao Pan
2025-07-13nft define a set variable for two ip to use, allow port forward monerod-p2pXiao Pan
2025-07-09nft masquerade 6in4 sit tunnel network interface name ipv6net so insp wg to ↵Xiao Pan
ba can use ipv6
2025-07-08init baXiao Pan
2025-07-04init xyzru VPSXiao Pan
2025-07-04nft config studio wg swgp wg to ca, studio use ::b ip6, ca use ::a ip6 so it ↵Xiao Pan
can do acme.sh
2025-05-02Add nft rules to port forward insp xmrd p2p when insp VPN into itXiao Pan
Also added monero-p2p port number to /etc/services for nft to use
2024-06-28feat: wg and swgp config, mainly for aaXiao Pan
2024-04-09swith to new ca server; wireguard no needXiao Pan
2024-04-05Add email server configsXiao Pan
References: https://github.com/LukeSmithxyz/emailwiz https://landchad.net/ https://wiki.archlinux.org/title/Postfix https://wiki.archlinux.org/title/Dovecot https://wiki.archlinux.org/title/OpenDKIM https://wiki.archlinux.org/title/OpenDMARC Maybe useful: https://doc.dovecot.org/settings/core/#dovecot-core-settings https://workaround.org https://kyun.host/docs/guides/email `man postconf.5` More necessary commands notes see arch_install.md
2024-03-20add future maybe enable ports to nft confXiao Pan
2024-03-18ca no qbtXiao Pan
2024-03-11Rename to wg0 so no need change names for new computer config.Xiao Pan
2024-03-05fix: name ia not kaXiao Pan
2023-12-03newer kernel no need for `chain prerouting { type nat hook prerouting ↵Xiao Pan
priority -100; policy accept; }`, more see https://www.procustodibus.com/blog/2021/11/wireguard-nftables/
2023-12-03maybe prevent ipv6 leakXiao Pan
2023-11-17change wg0 to wg_kaXiao Pan
2023-07-07allow from wg0 network interface so when connected via wireguard, I can ↵Xiao Pan
access local services in xyzka that does not have port open for outside
2023-07-07try close qbt-nox port and only access qbt-nox via wireguardXiao Pan
2023-07-04debloatXiao Pan
2023-07-01change qbt port name etc.Xiao Pan
2023-06-29wireguard nft firewall configsXiao Pan
2023-06-29prepare for wgXiao Pan
2023-06-13HDD monerod even with `monero-blockchain-import ↵Xiao Pan
--dangerous-unverified-import 1` is still super slow on ka, I give up
2023-06-12change monero-p2p port to default, open that portXiao Pan
2023-06-12updateXiao Pan
2023-06-12updateXiao Pan
2023-06-01nft, iperf3 port, commented out, maybe useful for futureXiao Pan
2023-05-31edit some filesXiao Pan
2022-05-28nftable accept monerod mullvad forward portxyz
2022-03-12nft no test rpi-vid portxyz
2022-03-05open rpi-vid port for testingxyz
2022-02-10nftables allow mullvad vpn port forwardingxyz
2022-01-30nftables.conf, allow qrcp, drop ssh and searx, based on services and config ↵xyz
files
2022-01-30nftables.conf, create and delete tables at top so can reloadxyz
2022-01-30nftables.conf, edited according to examples in arch wikixyz
2022-01-30add nftables.conf originalxyz