From 90d958cb690b6d00efbcbb71c92d53527ffeef38 Mon Sep 17 00:00:00 2001 From: Sonny Bakker Date: Tue, 2 Feb 2021 22:07:20 +0100 Subject: [PATCH] Revert "Try different firewall rules" This reverts commit 58d2528c409f790cbf188edf8ba510cbd625aabf. --- templates/nftables.j2 | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/templates/nftables.j2 b/templates/nftables.j2 index 3890158..6f597c8 100644 --- a/templates/nftables.j2 +++ b/templates/nftables.j2 @@ -6,7 +6,7 @@ flush ruleset table inet filter { - chain input { + chain INPUT { type filter hook input priority 0; policy drop; # accept any localhost traffic @@ -18,7 +18,7 @@ table inet filter { tcp dport { 22, 80, 443 } accept } - chain forward { + chain FORWARD { type filter hook forward priority 0; policy drop; ct state { established, related } accept; @@ -27,7 +27,7 @@ table inet filter { } table ip filter { - chain DOCKER { + chain DOCKER-USER { mark set 1 } }