diff options
Diffstat (limited to 'etc/nftables.conf')
| -rw-r--r-- | etc/nftables.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/nftables.conf b/etc/nftables.conf index 355465a..cb6e4d7 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -13,6 +13,7 @@ table inet filter { ct state {established, related} accept comment "allow tracked connections" iif lo accept comment "allow from loopback" meta l4proto { icmp, icmpv6 } accept comment "allow icmp" + meta pkttype multicast udp dport 5353 accept comment "allow mDNS discovery" # libvirt's NAT bridge: let guests reach the host's dnsmasq for DHCP+DNS. # libvirt manages its own forward/NAT chains but does NOT touch the input |