Reject conntrack fw DEST without an address in prerouting
ci/woodpecker/pr/build Pipeline was successful
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful

This commit is contained in:
2026-10-03 23:56:29 +10:00
parent da65c5d0a8
commit 9078f410ee
3 changed files with 19 additions and 9 deletions
+1 -1
View File
@@ -191,7 +191,7 @@ snat:
# conntrack:
# - action: notrack
# source: net
# dest: fw
# dest: fw:203.0.113.1
# proto: udp
# dport: [53]
# comment: "Skip conntrack for DNS"