Reject conntrack fw DEST without an address in prerouting
This commit is contained in:
@@ -191,7 +191,7 @@ snat:
|
||||
# conntrack:
|
||||
# - action: notrack
|
||||
# source: net
|
||||
# dest: fw
|
||||
# dest: fw:203.0.113.1
|
||||
# proto: udp
|
||||
# dport: [53]
|
||||
# comment: "Skip conntrack for DNS"
|
||||
|
||||
Reference in New Issue
Block a user