bundles/firewall/files/etc/nftables.d/10-tailscale.nft


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

#!/usr/sbin/nft -f
# vim: set ts=4 sw=4:
table inet filter {

    chain my_filter {
        iifname tailscale0 accept \
        comment "Accept inbount tailscale traffic"

        oifname tailscale0 accept \
        comment "Accept outbound tailscale traffic"

        udp dport { 41641 } accept \
        comment "Accept tailscale NAT traffic"
    }

}