Getting started with NFTables - long way to go

2025-09-29 15:52:06 +02:00
parent aea521cba4
commit 20dd97aafa
8 changed files with 92 additions and 6 deletions
--- a/services/firewall/global.policy.json
+++ b/services/firewall/global.policy.json
@@ -5,9 +5,12 @@
        "VPN": { "iface": "wg0" }
    },
    "policy": [
-        { "in": "VPN", "action": "accept" },
        { "out": "VPN", "action": "accept" },
+        { "in": "VPN", "action": "drop" },
        { "in": "WAN", "action": "drop" },
        { "action": "reject" }
+    ],
+    "snat": [
+        { "out": "WAN", "src": "10.0.0.1/24" }
    ]
 }