Полный продовый фикс fix22: DNS preflight, inet firewall, idempotent bootstrap, auth-semantics и redact-config

2026-05-08 09:41:57 +05:00
parent 06540087fd
commit 97e679f69f
15 changed files with 268 additions and 47 deletions
@@ -1,12 +1,12 @@
-table ip hy2xs {
+table inet hy2xs {
  chain input {
    type filter hook input priority 0; policy drop;

    iif lo accept
    ct state established,related accept
-    tcp dport {{SSH_PORT}} accept
+    meta nfproto ipv4 tcp dport {{SSH_PORT}} accept
    {{ACME_RULE}}
-    udp dport {{HYSTERIA_PORT}} accept
-    icmp type echo-request accept
+    meta nfproto ipv4 udp dport {{HYSTERIA_PORT}} accept
+    meta nfproto ipv4 icmp type echo-request accept
  }
 }