1.0

ansible/modules/firewall/nftables.conf

@@ -0,0 +1,27 @@
+table inet filter {
+    chain input {
+        type filter hook input priority 0; policy drop;
+
+        iif "lo" accept
+        iif "eth0"
+
+        ct state established,related accept
+
+        tcp dport 22 accept
+
+        tcp dport 8000 accept  
+        icmp type echo-request accept
+        icmpv6 type echo-request accept
+
+       
+    }
+
+    chain forward {
+        type filter hook forward priority 0; policy drop;
+        masquerade
+    }
+
+    chain output {
+        type filter hook output priority 0; policy accept;
+    }
+}