60 lines
1.1 KiB
Plaintext
60 lines
1.1 KiB
Plaintext
table inet nnd-base {
|
|
include "inet/nnd-base/sets/*";
|
|
|
|
chain rxfilter {
|
|
type filter hook input priority filter;
|
|
policy drop;
|
|
|
|
jump input;
|
|
counter reject with icmpx type admin-prohibited;
|
|
}
|
|
chain input {
|
|
include "inet/nnd-base/filter/input/*";
|
|
}
|
|
|
|
chain fwfilter {
|
|
type filter hook forward priority filter;
|
|
policy drop;
|
|
|
|
jump forward;
|
|
counter reject with icmpx type no-route;
|
|
}
|
|
chain forward {
|
|
include "inet/nnd-base/filter/forward/*";
|
|
}
|
|
|
|
chain txfilter {
|
|
type filter hook output priority filter;
|
|
policy accept;
|
|
|
|
jump output;
|
|
}
|
|
chain output {
|
|
include "inet/nnd-base/filter/output/*";
|
|
}
|
|
|
|
chain prenat {
|
|
type nat hook prerouting priority dstnat;
|
|
policy accept;
|
|
include "inet/nnd-base/nat/prerouting/*";
|
|
}
|
|
|
|
chain rxnat {
|
|
type nat hook input priority filter;
|
|
policy accept;
|
|
include "inet/nnd-base/nat/input/*";
|
|
}
|
|
|
|
chain txnat {
|
|
type nat hook output priority filter;
|
|
policy accept;
|
|
include "inet/nnd-base/nat/output/*";
|
|
}
|
|
|
|
chain postnat {
|
|
type nat hook postrouting priority srcnat;
|
|
policy accept;
|
|
include "inet/nnd-base/nat/postrouting/*";
|
|
}
|
|
}
|