From 38be6c13f76e893cf47636257071b440dec0c5b2 Mon Sep 17 00:00:00 2001 From: Robert Günzler Date: Sun, 7 Sep 2025 17:32:13 +0200 Subject: initial commit MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Robert Günzler --- bundles/firewall/files/etc/nftables.d/10-tailscale.nft | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 bundles/firewall/files/etc/nftables.d/10-tailscale.nft (limited to 'bundles/firewall/files/etc/nftables.d/10-tailscale.nft') diff --git a/bundles/firewall/files/etc/nftables.d/10-tailscale.nft b/bundles/firewall/files/etc/nftables.d/10-tailscale.nft new file mode 100644 index 0000000..f95e142 --- /dev/null +++ b/bundles/firewall/files/etc/nftables.d/10-tailscale.nft @@ -0,0 +1,16 @@ +#!/usr/sbin/nft -f +# vim: set ts=4 sw=4: +table inet filter { + + chain my_filter { + iifname tailscale0 accept \ + comment "Accept inbount tailscale traffic" + + oifname tailscale0 accept \ + comment "Accept outbound tailscale traffic" + + udp dport { 41641 } accept \ + comment "Accept tailscale NAT traffic" + } + +} -- cgit 1.4.1