75 lines
1.9 KiB
Plaintext
75 lines
1.9 KiB
Plaintext
family ipv4 {
|
|
table raw {
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -300
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -300
|
|
}
|
|
|
|
table mangle {
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -150
|
|
chain INPUT hook NF_INET_LOCAL_IN prio -150
|
|
chain FORWARD hook NF_INET_FORWARD prio -150
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -150
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio -150
|
|
}
|
|
|
|
table filter {
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 0
|
|
chain FORWARD hook NF_INET_FORWARD prio 0
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 0
|
|
}
|
|
|
|
table nat {
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -100
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 100
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -100
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio 100
|
|
}
|
|
|
|
table security {
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 50
|
|
chain FORWARD hook NF_INET_FORWARD prio 50
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 50
|
|
}
|
|
}
|
|
|
|
family ipv6 {
|
|
table raw {
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -300
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -300
|
|
}
|
|
|
|
table mangle {
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -150
|
|
chain INPUT hook NF_INET_LOCAL_IN prio -150
|
|
chain FORWARD hook NF_INET_FORWARD prio -150
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -150
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio -150
|
|
}
|
|
|
|
table filter {
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 0
|
|
chain FORWARD hook NF_INET_FORWARD prio 0
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 0
|
|
}
|
|
|
|
table nat {
|
|
chain PREROUTING hook NF_INET_PRE_ROUTING prio -100
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 100
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio -100
|
|
chain POSTROUTING hook NF_INET_POST_ROUTING prio 100
|
|
}
|
|
|
|
table security {
|
|
chain INPUT hook NF_INET_LOCAL_IN prio 50
|
|
chain FORWARD hook NF_INET_FORWARD prio 50
|
|
chain OUTPUT hook NF_INET_LOCAL_OUT prio 50
|
|
}
|
|
}
|
|
|
|
family arp {
|
|
table filter {
|
|
chain INPUT hook NF_ARP_IN prio 0
|
|
chain OUTPUT hook NF_ARP_OUT prio 0
|
|
}
|
|
}
|