cook:nft

cook:nft

Content #

  • Prevent both address and port resolution

    nft list table filter -nn
    
  • Add an input chain to the filter table

    nft add chain filter input { type filter hook input priority 0 \; }
    
  • allow established and related SSH connections.

    nft add rule filter input tcp dport 22 ct state established,related accept
    

From #