gitproxy/pve_toss_notes
1
0
Fork 0
mirror of https://gitee.com/callmer/pve_toss_notes.git synced 2026-08-31 14:02:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

更新 TS 测试配置

Browse Source
This commit is contained in:
CallMeR
2023-12-01 13:47:44 +08:00
parent e4117816c5
commit 891d8ef2f6
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/debian/debian_ts_20auto_upgrades.conf
+1 -1
View File
@@ -1,5 +1,5 @@
APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "10"; APT::Periodic::Unattended-Upgrade "7";
APT::Periodic::AutocleanInterval "1"; APT::Periodic::AutocleanInterval "1";
APT::Periodic::CleanInterval "1"; APT::Periodic::CleanInterval "1";
src/debian/debian_ts_nftables.conf
+3 -1
View File
@@ -83,7 +83,8 @@ table inet router {
} }
chain accept_to_lan { chain accept_to_lan {
meta nfproto ipv4 oifname "eth0" ct state invalid counter drop comment "defconf: prevent NAT leakage" meta nfproto ipv4 oifname "eth0" ct state invalid counter drop comment "defconf: prevent NATv4 leakage"
meta nfproto ipv6 oifname "eth0" ct state invalid counter drop comment "defconf: prevent NATv6 leakage"
oifname "eth0" counter accept comment "defconf: accept LAN IPv4 / IPv6 traffic" oifname "eth0" counter accept comment "defconf: accept LAN IPv4 / IPv6 traffic"
} }
@@ -130,6 +131,7 @@ table inet router {
chain srcnat_lan { chain srcnat_lan {
meta nfproto ipv4 counter masquerade comment "defconf: masquerade IPv4 LAN traffic" meta nfproto ipv4 counter masquerade comment "defconf: masquerade IPv4 LAN traffic"
meta nfproto ipv6 counter masquerade comment "defconf: masquerade IPv6 LAN traffic"
} }