16 lines
393 B
Plaintext
16 lines
393 B
Plaintext
nft -f - <<__EOF
|
|
table bridge filter {
|
|
chain INPUT {
|
|
# Erlaube nur DHCP Antworten von BATMAN -> KNOTEN
|
|
# -p IPv4 --ip-proto udp --ip-dport 68 -j IN_ONLY
|
|
ether type ip udp dport 68 counter jump IN_ONLY
|
|
}
|
|
|
|
chain OUTPUT {
|
|
# Erlaube nur DHCP Request von KNOTEN -> BATMAN
|
|
# -p IPv4 --ip-proto udp --ip-dport 67 -j OUT_ONLY
|
|
ether type ip udp dport 67 counter jump OUT_ONLY
|
|
}
|
|
}
|
|
__EOF
|