From 891d8ef2f6bded5e8992a2ac8c801e54fcfc0b5c Mon Sep 17 00:00:00 2001 From: CallMeR <9463297+callmer@user.noreply.gitee.com> Date: Fri, 1 Dec 2023 13:47:44 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20TS=20=E6=B5=8B=E8=AF=95?= =?UTF-8?q?=E9=85=8D=E7=BD=AE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/debian/debian_ts_20auto_upgrades.conf | 2 +- src/debian/debian_ts_nftables.conf | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/src/debian/debian_ts_20auto_upgrades.conf b/src/debian/debian_ts_20auto_upgrades.conf index 0336ec6..1d82c04 100644 --- a/src/debian/debian_ts_20auto_upgrades.conf +++ b/src/debian/debian_ts_20auto_upgrades.conf @@ -1,5 +1,5 @@ APT::Periodic::Update-Package-Lists "1"; -APT::Periodic::Unattended-Upgrade "10"; +APT::Periodic::Unattended-Upgrade "7"; APT::Periodic::AutocleanInterval "1"; APT::Periodic::CleanInterval "1"; diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf index 44085fe..41b88bb 100644 --- a/src/debian/debian_ts_nftables.conf +++ b/src/debian/debian_ts_nftables.conf @@ -83,7 +83,8 @@ table inet router { } chain accept_to_lan { - meta nfproto ipv4 oifname "eth0" ct state invalid counter drop comment "defconf: prevent NAT leakage" + meta nfproto ipv4 oifname "eth0" ct state invalid counter drop comment "defconf: prevent NATv4 leakage" + meta nfproto ipv6 oifname "eth0" ct state invalid counter drop comment "defconf: prevent NATv6 leakage" oifname "eth0" counter accept comment "defconf: accept LAN IPv4 / IPv6 traffic" } @@ -130,6 +131,7 @@ table inet router { chain srcnat_lan { meta nfproto ipv4 counter masquerade comment "defconf: masquerade IPv4 LAN traffic" + meta nfproto ipv6 counter masquerade comment "defconf: masquerade IPv6 LAN traffic" }