pmaports/main/postmarketos-config-nftables/rules/10_dhcp.nft

#!/usr/sbin/nft -f

table inet filter {
	chain input {

		# Allow DHCP server on usb*
		iifname "usb*" udp dport bootps accept comment "accept incoming DHCP on usb*"

	}
}
postmarketos-config-nftables: add package for configuring nftables fw (MR 2060) Installs nftables config useful for pmOS:: 1) drop all connections to wwan* (wildcard matching supported, are there any other wwan iface names that wouldn't match this?) 2) allow ssh, drop from wwan (kinda redundant w/ the first rule, but doesn't hurt..), allow DHCP on usb* 3) allow all incoming connections on usb* (with the -openusb subpackage) 4) enable logging all nftable events (with the -log subpackage), very useful for debugging fixes #1024 2021-03-26 02:59:23 +00:00			`#!/usr/sbin/nft -f`

			`table inet filter {`
			`chain input {`

			`# Allow DHCP server on usb*`
			`iifname "usb" udp dport bootps accept comment "accept incoming DHCP on usb"`

			`}`
			`}`