From ec57ec906aef1a379acf80e1d600e5d2fd6d7f96 Mon Sep 17 00:00:00 2001 From: sommerfeld Date: Fri, 14 Aug 2026 14:21:04 +0100 Subject: Add network document scanning --- etc/nftables.conf | 1 + 1 file changed, 1 insertion(+) (limited to 'etc') diff --git a/etc/nftables.conf b/etc/nftables.conf index 355465a..cb6e4d7 100644 --- a/etc/nftables.conf +++ b/etc/nftables.conf @@ -13,6 +13,7 @@ table inet filter { ct state {established, related} accept comment "allow tracked connections" iif lo accept comment "allow from loopback" meta l4proto { icmp, icmpv6 } accept comment "allow icmp" + meta pkttype multicast udp dport 5353 accept comment "allow mDNS discovery" # libvirt's NAT bridge: let guests reach the host's dnsmasq for DHCP+DNS. # libvirt manages its own forward/NAT chains but does NOT touch the input -- cgit v1.3.1