From 400fc6d71c476dba84aa52c5bf694caa8c4346dd Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Sat, 4 Mar 2023 12:57:20 +0000 Subject: [PATCH] Only flush our table to avoid disrupting other nftables users --- cookbooks/networking/templates/default/nftables.conf.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/networking/templates/default/nftables.conf.erb b/cookbooks/networking/templates/default/nftables.conf.erb index 63f45a0c8..6a2d72b8e 100644 --- a/cookbooks/networking/templates/default/nftables.conf.erb +++ b/cookbooks/networking/templates/default/nftables.conf.erb @@ -5,7 +5,7 @@ define external-interfaces = { <%= @interfaces.sort.uniq.join(", ") %> } define ip-private-addresses = { 10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.2.0/24, 192.168.0.0/16 } define ip6-private-addresses = { 2001:db8::/32, fc00::/7 } -flush ruleset +flush table inet filter table inet filter { set ip-osm-addresses { -- 2.39.5