diff options
| author | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-08-14 14:21:04 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-08-14 14:21:04 +0100 |
| commit | ec57ec906aef1a379acf80e1d600e5d2fd6d7f96 (patch) | |
| tree | 191983037e8072751429ca893c41cc43a9f2d5b0 /etc/nftables.conf | |
| parent | c678c19a30f61ab9736e206457b14b26843ae18f (diff) | |
| download | dotfiles-ec57ec906aef1a379acf80e1d600e5d2fd6d7f96.tar.gz dotfiles-ec57ec906aef1a379acf80e1d600e5d2fd6d7f96.tar.bz2 dotfiles-ec57ec906aef1a379acf80e1d600e5d2fd6d7f96.zip | |
Add network document scanning
Diffstat (limited to 'etc/nftables.conf')
| -rw-r--r-- | etc/nftables.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/nftables.conf b/etc/nftables.conf index 355465a..cb6e4d7 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -13,6 +13,7 @@ table inet filter { ct state {established, related} accept comment "allow tracked connections" iif lo accept comment "allow from loopback" meta l4proto { icmp, icmpv6 } accept comment "allow icmp" + meta pkttype multicast udp dport 5353 accept comment "allow mDNS discovery" # libvirt's NAT bridge: let guests reach the host's dnsmasq for DHCP+DNS. # libvirt manages its own forward/NAT chains but does NOT touch the input |