931ae03648
This rule is installed by default, since users that need usb inet won't have an easy way to install a subpackage. This is meant to facilitate: https://wiki.postmarketos.org/wiki/USB_Internet
12 lines
348 B
Plaintext
12 lines
348 B
Plaintext
#!/usr/sbin/nft -f
|
|
table inet filter {
|
|
chain input {
|
|
iifname "usb*" accept comment "Allow incoming network traffic from USB"
|
|
}
|
|
chain forward {
|
|
iifname "usb*" accept comment "Allow outgoing network traffic from USB"
|
|
ct state {established, related} counter accept comment "accept established connections"
|
|
}
|
|
}
|
|
|