bundles/firewall/files/etc/nftables.d/80-podman.nft


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

#!/usr/sbin/nft -f
# vim: set ts=4 sw=4:
table inet filter {

    # HACK: this would not be necessary if not for the two chains being
    # incompatible
    chain my_filter {
        ip daddr 10.89.0.0/24 ct state established,related accept \
        comment "Accept incoming podman traffic"

        ip saddr 10.89.0.0/24 accept \
        comment "Accept outgoing podman traffic"
    }

}