Jorijn van der Graaf
de2e819a16
Kernel aport forked from pmaports 7.1.2-r0, repointed at milos-linux combined-stable with the tested FP6 config (+EFI_ZBOOT for packaging); imsd + nftables aports from the pending pmaports submission. build.sh carries TODO(validate) markers - not yet run end-to-end. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
15 lines
326 B
Text
15 lines
326 B
Text
#!/usr/sbin/nft -f
|
|
|
|
table inet filter {
|
|
chain input {
|
|
|
|
# allow DNS from wlan*
|
|
iifname "wlan*" tcp dport 53 accept comment "Accept DNS over TCP on wlan*"
|
|
iifname "wlan*" udp dport 53 accept comment "Accept DNS over UDP on wlan*"
|
|
|
|
}
|
|
|
|
chain forward {
|
|
iifname "wlan*" accept comment "Accept forwarding from wlan*"
|
|
}
|
|
}
|