network/roles/firewall/files
Timotej Lazar c3ff39fe72 firewall: reload nftables in mgmt VRF
It doesn’t matter for the rules themselves as nft does not do VRFs,
but DNS names can only be resolved there. This is because all nodes
use the same IPs in the default VRF, so DNS replies sent from there go
to the active node.

This allows using DNS names in firewall rules. Not yet sure if that is
actually a good idea.
2024-08-19 13:54:01 +02:00
..
conntrackd.conf Initial commit, squashed 2023-12-18 12:55:47 +01:00
sshd_config.friwall Initial commit, squashed 2023-12-18 12:55:47 +01:00
update firewall: reload nftables in mgmt VRF 2024-08-19 13:54:01 +02:00