icybear/bearnet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix broken dns in containers

Browse Source
This commit is contained in:
iceBear67
2026-07-13 18:43:15 +08:00
parent b1c74df46a
commit 43cd7c1d22
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
image/overlay/etc/nftables.nft
+1
View File
@@ -72,6 +72,7 @@ table inet filter {
type filter hook forward priority 0; policy accept; type filter hook forward priority 0; policy accept;
ip daddr 10.0.0.119 tcp dport {80, 443} accept ip daddr 10.0.0.119 tcp dport {80, 443} accept
ip daddr 10.0.0.119 udp dport 443 accept ip daddr 10.0.0.119 udp dport 443 accept
ip daddr 10.0.0.1 udp dport 53 accept
# block LAN access from containers. # block LAN access from containers.
ip daddr 10.0.0.0/24 drop ip daddr 10.0.0.0/24 drop
ip daddr 192.168.0.0/16 drop ip daddr 192.168.0.0/16 drop