pmaports/main/postmarketos-config-nftables/rules/10_dhcp.nft

#!/usr/sbin/nft -f

table inet filter {
	chain input {

		# Allow DHCP server on usb*
		iifname "usb*" udp dport bootps accept comment "accept incoming DHCP on usb*"

		# Allow DHCP server on wlan* for hotspot
		iifname "wlan*" udp dport bootps accept comment "accept incoming DHCP on wlan*"
	}
}
postmarketos-config-nftables: add package for configuring nftables fw (MR 2060) Installs nftables config useful for pmOS:: 1) drop all connections to wwan* (wildcard matching supported, are there any other wwan iface names that wouldn't match this?) 2) allow ssh, drop from wwan (kinda redundant w/ the first rule, but doesn't hurt..), allow DHCP on usb* 3) allow all incoming connections on usb* (with the -openusb subpackage) 4) enable logging all nftable events (with the -log subpackage), very useful for debugging fixes #1024 2021-03-25 19:59:23 -07:00			`#!/usr/sbin/nft -f`

			`table inet filter {`
			`chain input {`

			`# Allow DHCP server on usb*`
			`iifname "usb" udp dport bootps accept comment "accept incoming DHCP on usb"`

main/postmarketos-config-nftables: fix hotspot with networkmanager (MR 2408) The networkmanager hotspot needs to have DHCP input enabled on the wifi interfaces so the temporary dnsmasq instance can work. The networkmanager backend is also switched to the nftables one so it can create the ad-hoc hotspot forwarding/masquerade table. 2021-08-05 23:37:09 +02:00			`# Allow DHCP server on wlan* for hotspot`
			`iifname "wlan" udp dport bootps accept comment "accept incoming DHCP on wlan"`
postmarketos-config-nftables: add package for configuring nftables fw (MR 2060) Installs nftables config useful for pmOS:: 1) drop all connections to wwan* (wildcard matching supported, are there any other wwan iface names that wouldn't match this?) 2) allow ssh, drop from wwan (kinda redundant w/ the first rule, but doesn't hurt..), allow DHCP on usb* 3) allow all incoming connections on usb* (with the -openusb subpackage) 4) enable logging all nftable events (with the -log subpackage), very useful for debugging fixes #1024 2021-03-25 19:59:23 -07:00			`}`
			`}`