diff options
| author | Eugen Wissner <belka@caraus.de> | 2025-06-28 13:59:15 +0200 |
|---|---|---|
| committer | Eugen Wissner <belka@caraus.de> | 2025-06-28 13:59:15 +0200 |
| commit | be3fcc60753515b1100c4dc2dfb355a16a49db87 (patch) | |
| tree | 4ce6ee0fe8ae3f7fbd4b2245c45175e821333a1b /rc.firewall/firewall | |
| parent | 544d98d88420e204b9e319c550ed417b42bc8a60 (diff) | |
| download | s6-be3fcc60753515b1100c4dc2dfb355a16a49db87.tar.gz | |
Add nftables firewall
Diffstat (limited to 'rc.firewall/firewall')
| -rw-r--r-- | rc.firewall/firewall/dependencies | 4 | ||||
| -rw-r--r-- | rc.firewall/firewall/down | 9 | ||||
| -rw-r--r-- | rc.firewall/firewall/type | 1 | ||||
| -rw-r--r-- | rc.firewall/firewall/up | 11 |
4 files changed, 25 insertions, 0 deletions
diff --git a/rc.firewall/firewall/dependencies b/rc.firewall/firewall/dependencies new file mode 100644 index 0000000..1c288cb --- /dev/null +++ b/rc.firewall/firewall/dependencies @@ -0,0 +1,4 @@ +network +# In some cases this service might need to be started after the service +# below dealing with IP packet forwarding +#ip_forward diff --git a/rc.firewall/firewall/down b/rc.firewall/firewall/down new file mode 100644 index 0000000..28f0d83 --- /dev/null +++ b/rc.firewall/firewall/down @@ -0,0 +1,9 @@ +###################################################### +# Run the rc.firewall_shutdown script (if it exists) # +###################################################### + +if -t { [ -x /etc/rc.d/rc.firewall_shutdown ] } +# Prepend every output with the service's name +pipeline -w { sed -u "s/^/firewall: /" } +fdmove -c 2 1 +nft flush ruleset diff --git a/rc.firewall/firewall/type b/rc.firewall/firewall/type new file mode 100644 index 0000000..bdd22a1 --- /dev/null +++ b/rc.firewall/firewall/type @@ -0,0 +1 @@ +oneshot diff --git a/rc.firewall/firewall/up b/rc.firewall/firewall/up new file mode 100644 index 0000000..2d62e8d --- /dev/null +++ b/rc.firewall/firewall/up @@ -0,0 +1,11 @@ +#################################################################### +# Run the rc.firewall script # +# # +# See the HOWTOs on http://www.netfilter.org/ for documentation on # +# setting up a firewall or NAT on Linux # +#################################################################### + +# Prepend every output with the service's name +pipeline -w { sed -u "s/^/firewall: /" } +fdmove -c 2 1 +nft -f /etc/nftables/conf.nft |