icybear/bearnet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

block access to my LAN

Browse Source
This commit is contained in:
iceBear67
2026-07-13 16:52:17 +08:00
parent d32acc00a5
commit 1b79e7677b
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
image/overlay/etc/nftables.nft
+7 -1
View File
@@ -70,6 +70,12 @@ table inet filter {
chain forward { chain forward {
type filter hook forward priority 0; policy accept; type filter hook forward priority 0; policy accept;
ip daddr 10.0.0.119 tcp dport {80, 443} accept
ip daddr 10.0.0.119 udp dport 443 accept
# block LAN access from containers.
ip daddr 10.0.0.0/24 drop
ip daddr 192.168.0.0/16 drop
ip daddr 172.16.0.0/12 drop
} }
chain output { chain output {
@@ -81,4 +87,4 @@ table inet filter {
include "/var/lib/nftables/*.nft" include "/var/lib/nftables/*.nft"
# Rules # Rules
include "/etc/nftables.d/*.nft" include "/etc/nftables.d/*.nft"