Timotej Lazar
c3ff39fe72
It doesn’t matter for the rules themselves as nft does not do VRFs, but DNS names can only be resolved there. This is because all nodes use the same IPs in the default VRF, so DNS replies sent from there go to the active node. This allows using DNS names in firewall rules. Not yet sure if that is actually a good idea. |
||
---|---|---|
.. | ||
conntrackd.conf | ||
sshd_config.friwall | ||
update |