icybear/bearnet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: conntrack does not load

Browse Source
This commit is contained in:
iceBear67
2026-07-14 18:24:40 +08:00
parent b621d3658c
commit 8e2eeaf54d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
image/overlay/etc/nftables.nft
+2
View File
@@ -70,7 +70,9 @@ table inet filter {
chain forward { chain forward {
type filter hook forward priority 0; policy accept; type filter hook forward priority 0; policy accept;
ct state established,related accept
ip daddr 10.0.0.1 udp dport 53 accept ip daddr 10.0.0.1 udp dport 53 accept
ip daddr 10.0.0.1 udp dport 41641 accept
ip daddr 10.0.0.119 accept ip daddr 10.0.0.119 accept
# block LAN access from containers. # block LAN access from containers.
ip daddr 10.0.0.0/24 drop ip daddr 10.0.0.0/24 drop