fix: conntrack does not load

2026-07-14 18:24:40 +08:00
parent b621d3658c
commit 8e2eeaf54d
1 changed files with 2 additions and 0 deletions
@@ -70,7 +70,9 @@ table inet filter {

 	chain forward {
 		type filter hook forward priority 0; policy accept;
+		ct state established,related accept
 		ip daddr 10.0.0.1 udp dport 53 accept
+		ip daddr 10.0.0.1 udp dport 41641 accept
 		ip daddr 10.0.0.119 accept
 		# block LAN access from containers.
 	    ip daddr 10.0.0.0/24 drop