From 43cd7c1d2230794ef9d848e683b515b1786f543b Mon Sep 17 00:00:00 2001 From: iceBear67 Date: Mon, 13 Jul 2026 18:43:15 +0800 Subject: [PATCH] fix broken dns in containers --- image/overlay/etc/nftables.nft | 1 + 1 file changed, 1 insertion(+) diff --git a/image/overlay/etc/nftables.nft b/image/overlay/etc/nftables.nft index 68ea898..823ee19 100644 --- a/image/overlay/etc/nftables.nft +++ b/image/overlay/etc/nftables.nft @@ -72,6 +72,7 @@ table inet filter { type filter hook forward priority 0; policy accept; ip daddr 10.0.0.119 tcp dport {80, 443} accept ip daddr 10.0.0.119 udp dport 443 accept + ip daddr 10.0.0.1 udp dport 53 accept # block LAN access from containers. ip daddr 10.0.0.0/24 drop ip daddr 192.168.0.0/16 drop