ms2k/quorate
SHA256
Watch
0
Code Releases Activity

ce7cb702218693d08ea6d83464d2457c9250027c

Browse source
This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c
1 changed files with 145336 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

20
services/oci-l4-relay-guest/image/etc/nftables.conf Normal file
View file

@ -0,0 +1,20 @@
flush ruleset
table inet oci_l4_relay_web_allow {
counter web_allow_denied {}
chain ingress {
type filter hook prerouting priority raw - 20; policy accept;
fib daddr type local tcp dport { 80, 443, 465, 993 } counter name web_allow_denied drop
}
}
table inet oci_l4_relay_smtp_deny {
set denied_v4 {
type ipv4_addr
flags interval, timeout
}
counter smtp_denied {}
chain ingress {
type filter hook prerouting priority raw - 19; policy accept;
fib daddr type local tcp dport 25 ip saddr @denied_v4 counter name smtp_denied drop
}
}