router: fixup policies

This commit is contained in:
Koushik Dutta
2025-02-26 19:15:46 -08:00
parent f9f9762046
commit e373a3935e

View File

@@ -1,6 +1,6 @@
table ip nat {
chain POSTROUTING {
type nat hook postrouting priority srcnat;
type nat hook postrouting priority srcnat; policy accept;
jump postrouting_scrypted
}
@@ -8,7 +8,7 @@ table ip nat {
}
chain PREROUTING {
type nat hook prerouting priority dstnat;
type nat hook prerouting priority dstnat; policy accept;
jump prerouting_scrypted;
}
@@ -18,7 +18,7 @@ table ip nat {
table ip filter {
chain FORWARD {
type filter hook forward priority filter;
type filter hook forward priority filter; policy drop;
jump forward_scrypted
}
@@ -28,7 +28,7 @@ table ip filter {
table ip6 nat {
chain POSTROUTING {
type nat hook postrouting priority srcnat;
type nat hook postrouting priority srcnat; policy accept;
jump postrouting_scrypted
}
@@ -36,7 +36,7 @@ table ip6 nat {
}
chain PREROUTING {
type nat hook prerouting priority dstnat;
type nat hook prerouting priority dstnat; policy accept;
jump prerouting_scrypted;
}
@@ -46,7 +46,7 @@ table ip6 nat {
table ip6 filter {
chain FORWARD {
type filter hook forward priority filter;
type filter hook forward priority filter; policy drop;
jump forward_scrypted
}