3960ad0c51
Anbox needs a specific set of nftables rules to allow incoming and outgoing traffic. Anbox makes it easy to allow the specific traffic due to the established `anbox0` bridge network interface.
11 lines
345 B
Text
11 lines
345 B
Text
#!/usr/sbin/nft -f
|
|
table inet filter {
|
|
chain input {
|
|
iif anbox0 accept comment "Allow incomming network traffic from Anbox"
|
|
}
|
|
chain forward {
|
|
iif anbox0 accept comment "Allow outgoing network traffic from Anbox"
|
|
ct state {established, related} counter accept comment "accept established connections"
|
|
}
|
|
}
|
|
|