block access to my LAN

2026-07-13 16:52:17 +08:00
parent d32acc00a5
commit 1b79e7677b
1 changed files with 7 additions and 1 deletions
@@ -70,6 +70,12 @@ table inet filter {
 	chain forward {
 		type filter hook forward priority 0; policy accept;
 		ip daddr 10.0.0.119 tcp dport {80, 443} accept
 		ip daddr 10.0.0.119 udp dport 443 accept
 		# block LAN access from containers.
 	    ip daddr 10.0.0.0/24 drop
 		ip daddr 192.168.0.0/16 drop
 		ip daddr 172.16.0.0/12 drop
 	}
 	chain output {