search for: allowed_tcp_dport

Displaying 1 result from an estimated 1 matches for "allowed_tcp_dport".

Did you mean: allowed_tcp_dports
2024 Jul 13
2
[Bug 1758] New: Design flaw in chain traversal
...excerpt just do demonstrate the problem) was something like table inet firewall { set allowed_interfaces { type ifname elements = { "lo" } } set allowed_protocols { type inet_proto elements = { icmp, icmpv6 } } set allowed_tcp_dports { type inet_service elements = { ssh } } chain allow { ct state established,related accept meta l4proto @allowed_protocols accept iifname @allowed_interfaces accept tcp dport @allowed_tcp_dports accept...