search for: allowed_interfac

...c is broken. Let me explain this. I followed common examples to write a simple firewall ruleset to protect a machine to get into the nftables style (and not just copying my old rules), and (a shortened excerpt just do demonstrate the problem) was something like table inet firewall { set allowed_interfaces { type ifname elements = { "lo" } } set allowed_protocols { type inet_proto elements = { icmp, icmpv6 } } set allowed_tcp_dports { type inet_service elements = { ssh } } chain allow {...