diff --git a/templates/nftables.j2 b/templates/nftables.j2 index 3890158..6f597c8 100644 --- a/templates/nftables.j2 +++ b/templates/nftables.j2 @@ -6,7 +6,7 @@ flush ruleset table inet filter { - chain input { + chain INPUT { type filter hook input priority 0; policy drop; # accept any localhost traffic @@ -18,7 +18,7 @@ table inet filter { tcp dport { 22, 80, 443 } accept } - chain forward { + chain FORWARD { type filter hook forward priority 0; policy drop; ct state { established, related } accept; @@ -27,7 +27,7 @@ table inet filter { } table ip filter { - chain DOCKER { + chain DOCKER-USER { mark set 1 } }