Webserver local keine Verbindung nach aussen

Konfig

• cat /etc/nftables.conf

#!/usr/sbin/nft -f

flush ruleset

table inet filter {
	chain input {
		type filter hook input priority filter;
	}
	chain forward {
		type filter hook forward priority filter;
	}
	chain output {
		type filter hook output priority filter;
                ct state new meta skuid 33 ip dport 10.88.2XX.21 udp dport 53 accept
		ct state new meta skuid 33 ip dport 10.88.2XX.21 tcp dport 53 accept
                ct state new meta skuid 33 log prefix "nft-drop-uid33: " drop              
	}
}

Enablen

• systemctl enable nftables

Neu laden

• nft -f /etc/nftables.conf

Kontrolle

• journal -fkg nft-drop