db00e85baf
There is "iifname "wwan*" drop" defined in 01_wwan.nft, which drops any not "established, related" incoming packet from WWAN. [ci:skip-build]: already built successfully in CI
8 lines
117 B
Text
8 lines
117 B
Text
#!/usr/sbin/nft -f
|
|
|
|
table inet filter {
|
|
chain input {
|
|
# allow ssh
|
|
tcp dport 22 accept comment "accept SSH"
|
|
}
|
|
}
|