Webserver local keine Verbindung nach aussen

Konfig

• cat /etc/nftables.conf

#!/usr/sbin/nft -f

flush ruleset

table inet filter {
	chain input {
		type filter hook input priority filter;
	}
	chain forward {
		type filter hook forward priority filter;
	}
	chain output {
		type filter hook output priority filter;
                ct state new meta skuid 33 log prefix "nft-drop-uid33: " drop              
	}
}

Enablen

• systemctl enable nftables

Neu laden

• nft -f /etc/nftables.conf

Kontrolle

• journal -fkg nft-drop