Tomas Volf 82f9e5ac97 services: nftables: Tighten the default rules. ... Packets for local host IP ranges should be coming only over lo. If that is not the case, we should drop them. Use iif for the check instead of iifname, lo is guaranteed to exists, and iif is faster. * gnu/services/networking.scm (%default-nftables-ruleset): Tighten the rules. Signed-off-by: Ludovic Courtès <ludo@gnu.org>		2023-10-20 00:33:26 +02:00
..
admin.scm
audio.scm	services: configuration: Add some commonly used predicates.	2023-10-07 12:41:06 -04:00
auditd.scm
authentication.scm
avahi.scm
base.scm	services: static-networking: Add support for bonding.	2023-10-11 18:51:07 +02:00
certbot.scm
cgit.scm
ci.scm
configuration.scm	services: configuration: Add some commonly used predicates.	2023-10-07 12:41:06 -04:00
cuirass.scm	services: cuirass: Add ‘log-expiry’ option for ‘remote-server’.	2023-10-12 22:14:34 +02:00
cups.scm
databases.scm
dbus.scm
desktop.scm
dict.scm
dns.scm
docker.scm
file-sharing.scm
games.scm
ganeti.scm
getmail.scm
guix.scm
herd.scm
hurd.scm
kerberos.scm
ldap.scm
lightdm.scm
linux.scm	services: fstrim-service-type: Serialize with SRFI-171 transducers.	2023-10-07 12:41:05 -04:00
lirc.scm
mail.scm
mcron.scm	services: mcron: Hide ‘mkdir-p’ from (shepherd support).	2023-10-05 23:14:55 +02:00
messaging.scm
monitoring.scm
networking.scm	services: nftables: Tighten the default rules.	2023-10-20 00:33:26 +02:00
nfs.scm
nix.scm
pam-mount.scm
pm.scm
rsync.scm
samba.scm
science.scm
sddm.scm
security-token.scm
security.scm
shepherd.scm
sound.scm
spice.scm
ssh.scm
syncthing.scm
sysctl.scm
telephony.scm	services: configuration: Add some commonly used predicates.	2023-10-07 12:41:06 -04:00
version-control.scm
virtualization.scm	services: hurd-vm: Leave root password uninitialized when offloading.	2023-10-05 23:14:55 +02:00
vnc.scm
vpn.scm
web.scm
xorg.scm