468
回編集
(→LXC) |
|||
|
<nowiki>
USER veth lxcbr0 10
</nowiki>
/etc/nftables.conf
<nowiki>
table inet filter {
chain input {
iifname "lxcbr0" udp dport {53,67} accept
iifname "lxcbr0" tcp dport 53 accept
}
chain forward {
iifname "lxcbr0" accept
oifname "lxcbr0" ct state established,related accept
}
}
</nowiki>
| |||