From 8e2eeaf54d46ee20b9f2cb155a79b6558983e1b7 Mon Sep 17 00:00:00 2001 From: iceBear67 Date: Tue, 14 Jul 2026 18:24:40 +0800 Subject: [PATCH] fix: conntrack does not load --- image/overlay/etc/nftables.nft | 2 ++ 1 file changed, 2 insertions(+) diff --git a/image/overlay/etc/nftables.nft b/image/overlay/etc/nftables.nft index efab20b..e20ab14 100644 --- a/image/overlay/etc/nftables.nft +++ b/image/overlay/etc/nftables.nft @@ -70,7 +70,9 @@ table inet filter { chain forward { type filter hook forward priority 0; policy accept; + ct state established,related accept ip daddr 10.0.0.1 udp dport 53 accept + ip daddr 10.0.0.1 udp dport 41641 accept ip daddr 10.0.0.119 accept # block LAN access from containers. ip daddr 10.0.0.0/24 drop