diff options
author | A. Wilcox <awilcox@wilcox-tech.com> | 2019-01-13 19:44:23 +0000 |
---|---|---|
committer | A. Wilcox <awilcox@wilcox-tech.com> | 2019-01-13 19:44:23 +0000 |
commit | dadc93d1b35aa2336bbd46cc590dabd5d844bb0e (patch) | |
tree | 907612528285f1df404f5de34942c21f247fd568 /user/nftables/nftables.confd | |
parent | b818b871b17b09a6adc0b43f8e65977bab5104a6 (diff) | |
parent | a21b49c9ed1b34c463560d31c0cbeead46810038 (diff) | |
download | packages-dadc93d1b35aa2336bbd46cc590dabd5d844bb0e.tar.gz packages-dadc93d1b35aa2336bbd46cc590dabd5d844bb0e.tar.bz2 packages-dadc93d1b35aa2336bbd46cc590dabd5d844bb0e.tar.xz packages-dadc93d1b35aa2336bbd46cc590dabd5d844bb0e.zip |
Merge branch 'nftables' into 'master'
nftables + dependencies: new packages
This MR contains APKBUILDs for nftables and its libnftnl dependency. APKBUILDs have been adapted and trimmed from Alpine; the OpenRC scripts come indirectly from Gentoo via Alpine.
Tested on x86_64 by NAT'ing a couple of VM's to the outside world.
See merge request !145
Diffstat (limited to 'user/nftables/nftables.confd')
-rw-r--r-- | user/nftables/nftables.confd | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/user/nftables/nftables.confd b/user/nftables/nftables.confd new file mode 100644 index 000000000..87fa8f2ea --- /dev/null +++ b/user/nftables/nftables.confd @@ -0,0 +1,24 @@ +# Configuration for /etc/init.d/nftables + +# Location of file with nftables rules to restore on service start, +# and save rules to on service stop when $save_on_stop is enabled. +#rules_file="/etc/firewall.nft" + +# Options to pass to nft on save. +#save_options="-n" + +# Save state on stopping nftables. +#save_on_stop="yes" + +# Enable IPv4/IPv6 forwarding with the rules? +# Note: If you want to enable forwarding only on selected interfaces, +# keep this disabled and enable forwarding using /etc/sysctl.conf. +#enable_forwarding="no" + +# If you need to log nftables messages as soon as nftables starts, +# AND your logger does NOT depend on the network, then you may wish +# to uncomment the next line. +# If your logger depends on the network, and you uncomment this line +# you will create an unresolvable circular dependency during startup. +# After commenting or uncommenting this line, you must run 'rc-update -u'. +#rc_use="logger" |