diff --git a/rt-mep/nftables.conf b/rt-mep/nftables.conf new file mode 100644 index 0000000..a3917fe --- /dev/null +++ b/rt-mep/nftables.conf @@ -0,0 +1,43 @@ +#!/usr/sbin/nft -f +# /etc/nftables.conf + +flush ruleset + +# Define variables for interfaces and IP addresses +define LAN = eth1 +define WAN = eth0 +define LAN_SUBNET = 10.100.2.0/24 +define WAN_IP = 45.139.163.92 + + +table inet nat { + chain prerouting { + type nat hook prerouting priority 0; + } + + chain postrouting { + type nat hook postrouting priority 100; + oifname $WAN masquerade; + } + + chain output { + type nat hook output priority -100; + } +} + +table inet filter { + chain input { + type filter hook input priority 0; + } + + chain forward { + type filter hook forward priority 0; + + # Forward LAN traffic to WAN + iifname $LAN ip saddr $LAN_SUBNET oifname $WAN accept; + } + + chain output { + type filter hook output priority 0; + } +}