Displaying 1 result from an estimated 1 matches for "allowed_interfaces".
2024 Jul 13
2
[Bug 1758] New: Design flaw in chain traversal
...c is broken.
Let me explain this.
I followed common examples to write a simple firewall ruleset to protect a
machine to get into the nftables style (and not just copying my old rules), and
(a shortened excerpt just do demonstrate the problem) was something like
table inet firewall {
set allowed_interfaces {
type ifname
elements = { "lo" }
}
set allowed_protocols {
type inet_proto
elements = { icmp, icmpv6 }
}
set allowed_tcp_dports {
type inet_service
elements = { ssh }
}
chain allow {...