start declaring the 'global' chain with module resources
the 'global' chain is a vestigial piece of early development on thismodule, but it can be useful for creating fast short-circuits likeblocking traffic that match a certain set of IPs.
in the current state we can't inject rules inside the 'global' chain...
Auto fill simple table configuration
Allow disabling default NAT tables and chains
Reload rules atomically
Background: The unit file for nftables on CentOS 8 contains:
```ExecStart=/sbin/nft -f /etc/sysconfig/nftables.confExecReload=/sbin/nft 'flush ruleset; include "/etc/sysconfig/nftables.conf";'ExecStop=/sbin/nft flush ruleset```...
Move ICMP stuff to separate classes
Move ct rules from global to INPUT and OUTPUT
Use concat for table conf generation
This way other components of the module will be able to add extra stuffto the table definitions like sets.
Include table ip6 nat
Add basic ip6 nat chains
Allow ICMPv6 Router Advertisment packets
Voir les révisions
Formats disponibles : Atom
