From 6d55fb5efeb4b63a71826bf76377db2704b17bd4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ma=C3=ABl=20Gramain?= Date: Tue, 26 Mar 2024 15:53:43 +0100 Subject: [PATCH] nftables --- rt-mep/nftables.conf | 43 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 rt-mep/nftables.conf diff --git a/rt-mep/nftables.conf b/rt-mep/nftables.conf new file mode 100644 index 0000000..a3917fe --- /dev/null +++ b/rt-mep/nftables.conf @@ -0,0 +1,43 @@ +#!/usr/sbin/nft -f +# /etc/nftables.conf + +flush ruleset + +# Define variables for interfaces and IP addresses +define LAN = eth1 +define WAN = eth0 +define LAN_SUBNET = 10.100.2.0/24 +define WAN_IP = 45.139.163.92 + + +table inet nat { + chain prerouting { + type nat hook prerouting priority 0; + } + + chain postrouting { + type nat hook postrouting priority 100; + oifname $WAN masquerade; + } + + chain output { + type nat hook output priority -100; + } +} + +table inet filter { + chain input { + type filter hook input priority 0; + } + + chain forward { + type filter hook forward priority 0; + + # Forward LAN traffic to WAN + iifname $LAN ip saddr $LAN_SUBNET oifname $WAN accept; + } + + chain output { + type filter hook output priority 0; + } +}