From d69101077b68db678302c61b9073fc5d855fd532 Mon Sep 17 00:00:00 2001 From: CallMeR <9463297+callmer@user.noreply.gitee.com> Date: Sun, 7 Jan 2024 12:03:45 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20offload=20=E5=8C=B9?= =?UTF-8?q?=E9=85=8D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/debian/debian_ts_nftables.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/debian/debian_ts_nftables.conf b/src/debian/debian_ts_nftables.conf index fb377b1..46b3b0d 100644 --- a/src/debian/debian_ts_nftables.conf +++ b/src/debian/debian_ts_nftables.conf @@ -33,7 +33,7 @@ table inet router { chain forward { type filter hook forward priority filter; policy drop; - meta l4proto { tcp, udp } flow add @ft comment "defconf: track forwarded flows" + ct state established,related flow add @ft comment "defconf: track forwarded flows" ct state vmap { established : accept, related : accept } comment "defconf: handle forwarded flows" iifname "eth0" jump forward_lan comment "defconf: handle LAN IPv4 / IPv6 forward traffic" iifname "tailscale0" counter jump forward_tailscale comment "tsconf: handle TS IPv4 / IPv6 forward traffic"