From e4db0b25bf6540386e737594a47cb92a83c0cbea Mon Sep 17 00:00:00 2001 From: Xiao Pan Date: Wed, 25 Oct 2023 06:45:08 +0000 Subject: update --- etc/nftables.conf | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) (limited to 'etc/nftables.conf') diff --git a/etc/nftables.conf b/etc/nftables.conf index 47605bfb..999b91ac 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -6,8 +6,7 @@ # some codes from https://wiki.archlinux.org/title/Nftables # needed for reload config using `sudo systemctl restart nftables` or `sudo nft -f /etc/nftables.conf` -table inet my_table -delete table inet my_table +flush ruleset table inet my_table { @@ -22,9 +21,8 @@ table inet my_table { meta l4proto ipv6-icmp accept tcp dport ssh accept - #tcp dport searx accept - tcp dport qrcp accept udp dport mdns accept + #tcp dport iperf3 accept pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited counter comment "count any other traffic" -- cgit v1.2.3-70-g09d2