nftables
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
nftables [2020/02/14 10:33] ww [The Pravidla] |
nftables [2022/03/16 09:38] (current) |
||
|---|---|---|---|
| Line 93: | Line 93: | ||
| jump global | jump global | ||
| + | | ||
| + | # loopback | ||
| + | oif lo accept | ||
| tcp dport $port_dns accept | tcp dport $port_dns accept | ||
| Line 128: | Line 131: | ||
| | | ||
| iif " | iif " | ||
| + | } | ||
| + | } | ||
| + | </ | ||
| + | |||
| + | ===== Docker smrdí ===== | ||
| + | |||
| + | ==== Komunikace host <-> container ==== | ||
| + | - Smazat ''/ | ||
| + | - Udělat si override pro síť dockeru, aby se daly ručně specifikovat pravidla na vyžádané IP adresy: | ||
| + | '' | ||
| + | <code json>{ | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | " | ||
| + | }</ | ||
| + | |||
| + | - Přidat do nftables: | ||
| + | < | ||
| + | table inet filter { | ||
| + | chain output { | ||
| + | # Docker | ||
| + | oifname " | ||
| } | } | ||
| } | } | ||
| </ | </ | ||
nftables.1581672836.txt.gz · Last modified: 2022/03/16 09:38 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
