82f9e5ac97
Packets for local host IP ranges should be coming only over lo. If that is not the case, we should drop them. Use iif for the check instead of iifname, lo is guaranteed to exists, and iif is faster. * gnu/services/networking.scm (%default-nftables-ruleset): Tighten the rules. Signed-off-by: Ludovic Courtès <ludo@gnu.org> |
||
|---|---|---|
| .. | ||
| bootloader | ||
| build | ||
| home | ||
| installer | ||
| machine | ||
| packages | ||
| services | ||
| system | ||
| tests | ||
| artwork.scm | ||
| bootloader.scm | ||
| ci.scm | ||
| compression.scm | ||
| home.scm | ||
| image.scm | ||
| installer.scm | ||
| local.mk | ||
| machine.scm | ||
| packages.scm | ||
| services.scm | ||
| system.scm | ||
| tests.scm | ||