diff options
| author | Tomas Volf <[email protected]> | 2023-08-14 01:21:33 +0200 |
|---|---|---|
| committer | Ludovic Courtès <[email protected]> | 2023-10-20 00:33:26 +0200 |
| commit | 82f9e5ac97e076d57b8502c920ac770a82879b9a (patch) | |
| tree | 9eeed3200a00529e20c2e4bf706b1ff26e50ca67 /tests/import-github.scm | |
| parent | 6156bf9078e52483cad01ca3fad2ad793773d0bc (diff) | |
services: nftables: Tighten the default rules.
Packets for local host IP ranges should be coming only over lo. If that is
not the case, we should drop them. Use iif for the check instead of iifname,
lo is guaranteed to exists, and iif is faster.
* gnu/services/networking.scm (%default-nftables-ruleset): Tighten the rules.
Signed-off-by: Ludovic Courtès <[email protected]>
Diffstat (limited to 'tests/import-github.scm')
0 files changed, 0 insertions, 0 deletions