From 42c20f88095b74c530fdd461c02532799e374855 Mon Sep 17 00:00:00 2001
From: Xiao Pan <xyz@flylightning.xyz>
Date: Thu, 10 Jul 2025 20:55:54 +0800
Subject: nft allow ssh from wg_* iifname, because I will let cfgs to push

---
 etc/nftables.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'etc/nftables.conf')

diff --git a/etc/nftables.conf b/etc/nftables.conf
index c26ae020..480298a3 100644
--- a/etc/nftables.conf
+++ b/etc/nftables.conf
@@ -20,7 +20,7 @@ table inet my_table {
 		ip protocol icmp accept
 		meta l4proto ipv6-icmp accept
 
-		#tcp dport ssh accept
+		iifname wg_* tcp dport ssh accept
 		#tcp dport qbt-nox accept
 		#tcp dport searx accept
 		tcp dport qrcp accept
-- 
cgit v1.2.3-70-g09d2