Jorijn van der Graaf
de2e819a16
Kernel aport forked from pmaports 7.1.2-r0, repointed at milos-linux combined-stable with the tested FP6 config (+EFI_ZBOOT for packaging); imsd + nftables aports from the pending pmaports submission. build.sh carries TODO(validate) markers - not yet run end-to-end. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
15 lines
549 B
Text
15 lines
549 B
Text
#!/usr/sbin/nft -f
|
|
|
|
table inet filter {
|
|
chain input {
|
|
|
|
# imsd's IPsec-protected SIP ports on the IMS PDN. Ordered before
|
|
# 01_wwan.nft's qmapmux drop: the ESP-decapsulated inbound flows
|
|
# arrive on qmapmux* and would be dropped there. The comment is
|
|
# load-bearing — imsd's ims-pdn-up.sh checks for it and skips its
|
|
# runtime rule insertion when this rule is present.
|
|
iifname "qmapmux*" tcp dport 45061-45062 accept comment "imsd-protected-ports"
|
|
iifname "qmapmux*" udp dport 45061-45062 accept comment "imsd-protected-ports"
|
|
|
|
}
|
|
}
|