diff --git a/templates/nftables.j2 b/templates/nftables.j2 index 6f597c8..3890158 100644 --- a/templates/nftables.j2 +++ b/templates/nftables.j2 @@ -6,7 +6,7 @@ flush ruleset table inet filter { - chain INPUT { + chain input { type filter hook input priority 0; policy drop; # accept any localhost traffic @@ -18,7 +18,7 @@ table inet filter { tcp dport { 22, 80, 443 } accept } - chain FORWARD { + chain forward { type filter hook forward priority 0; policy drop; ct state { established, related } accept; @@ -27,7 +27,7 @@ table inet filter { } table ip filter { - chain DOCKER-USER { + chain DOCKER { mark set 1 } }