You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
75 lines
1.9 KiB
75 lines
1.9 KiB
4 months ago
|
family ipv4 {
|
||
|
|
table raw {
|
||
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -300
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -300
|
||
|
|
}
|
||
|
|
|
||
|
|
table mangle {
|
||
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -150
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio -150
|
||
|
|
chain FORWARD hook NF_INET_FORWARD prio -150
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -150
|
||
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio -150
|
||
|
|
}
|
||
|
|
|
||
|
|
table filter {
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 0
|
||
|
|
chain FORWARD hook NF_INET_FORWARD prio 0
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 0
|
||
|
|
}
|
||
|
|
|
||
|
|
table nat {
|
||
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -100
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 100
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -100
|
||
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio 100
|
||
|
|
}
|
||
|
|
|
||
|
|
table security {
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 50
|
||
|
|
chain FORWARD hook NF_INET_FORWARD prio 50
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 50
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
family ipv6 {
|
||
|
|
table raw {
|
||
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -300
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -300
|
||
|
|
}
|
||
|
|
|
||
|
|
table mangle {
|
||
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -150
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio -150
|
||
|
|
chain FORWARD hook NF_INET_FORWARD prio -150
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -150
|
||
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio -150
|
||
|
|
}
|
||
|
|
|
||
|
|
table filter {
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 0
|
||
|
|
chain FORWARD hook NF_INET_FORWARD prio 0
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 0
|
||
|
|
}
|
||
|
|
|
||
|
|
table nat {
|
||
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -100
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 100
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -100
|
||
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio 100
|
||
|
|
}
|
||
|
|
|
||
|
|
table security {
|
||
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 50
|
||
|
|
chain FORWARD hook NF_INET_FORWARD prio 50
|
||
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 50
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
family arp {
|
||
|
|
table filter {
|
||
|
|
chain INPUT hook NF_ARP_IN prio 0
|
||
|
|
chain OUTPUT hook NF_ARP_OUT prio 0
|
||
|
|
}
|
||
|
|
}
|