Nft-1

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
table ip filter {
	chain INPUT {
		type filter hook input priority filter; policy drop;
		ct state established,related counter packets 52 bytes 3836 accept
		iifname "lo" ct state new counter packets 0 bytes 0 accept
		tcp dport 22 ct state new counter packets 0 bytes 0 accept
	}

	chain OUTPUT {
		type filter hook output priority filter; policy drop;
		ct state established,related counter packets 26 bytes 2744 accept
		ct state new counter packets 1 bytes 76 accept
	}

	chain FORWARD {
		type filter hook forward priority filter; policy drop;
		ct state established,related counter packets 0 bytes 0 accept
	}
}