Files
systemd/src/basic
Topi Miettinen ab51fd9dbd network: firewall integration with NFT sets
New directives `NFTSet=`, `IPv4NFTSet=` and `IPv6NFTSet=` provide a method for
integrating configuration of dynamic networks into firewall rules with NFT
sets.

/etc/systemd/network/eth.network
```
[DHCPv4]
...
NFTSet=netdev:filter:eth_ipv4_address
```

```
table netdev filter {
        set eth_ipv4_address {
                type ipv4_addr
                flags interval
        }
        chain eth_ingress {
                type filter hook ingress device "eth0" priority filter; policy drop;
                ip saddr != @eth_ipv4_address drop
                accept
        }
}
```
```
sudo nft list set netdev filter eth_ipv4_address
table netdev filter {
        set eth_ipv4_address {
                type ipv4_addr
                flags interval
                elements = { 10.0.0.0/24 }
        }
}
```
2022-06-08 16:12:25 +00:00
..
…
…
2021-10-20 22:20:18 +09:00
2022-02-21 23:08:34 +00:00
2022-03-03 22:48:43 +01:00
2021-05-17 22:27:41 +01:00
2021-05-17 22:27:41 +01:00
2021-05-17 22:27:41 +01:00
2022-04-27 16:32:15 +09:00
2021-06-30 23:33:00 +09:00
2021-10-08 13:11:00 +01:00
2022-06-06 18:24:10 +00:00
2022-06-06 18:24:10 +00:00
2022-03-03 22:48:43 +01:00
2021-03-31 21:43:45 +02:00
…
…
2022-01-31 11:50:15 +09:00
2022-04-11 19:20:08 +09:00
2021-09-28 15:15:12 +09:00
2021-09-28 15:15:12 +09:00
2022-05-31 09:20:52 +02:00
2022-05-31 09:20:52 +02:00
2022-04-27 16:32:15 +09:00
…
2022-06-07 15:18:46 +02:00
2022-03-18 09:42:38 +01:00
2021-08-10 17:08:00 +02:00
2022-06-01 03:12:33 +09:00
2021-04-08 13:00:50 +02:00
2021-02-16 17:15:11 +01:00
2021-03-01 13:40:52 +01:00