Ruakij b45a07da56 Add forward_guard to host_firewall for a forward chain that drops traffic to guarded guests outside the allowed interfaces, ports and ICMP types

2026-10-08 08:48:40 +00:00

..

host.nft.j2

Add forward_guard to host_firewall for a forward chain that drops traffic to guarded guests outside the allowed interfaces, ports and ICMP types

2026-10-08 08:48:40 +00:00

nft-host-geo.j2

Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback

2026-10-07 11:02:59 +00:00