Merge remote-tracking branch 'origin/main' into benvin/ct-helpers

# Conflicts: # internal/nftables/compiler.go # internal/nftables/compiler_test.go # internal/nftables/engine.go
2026-10-04 13:58:25 +11:00
parent c557c4b78a 9abaa85d6a
commit b85ba61fe6
9 changed files with 598 additions and 130 deletions
@@ -84,6 +84,22 @@ func (e *Engine) ensureChains(table *nftables.Table, policies map[string]nftable
 			Hooknum:  nftables.ChainHookOutput,
 			Priority: nftables.ChainPriorityMangle,
 		},
+		"raw_prerouting": {
+			Name:     "raw_prerouting",
+			Table:    table,
+			Type:     nftables.ChainTypeFilter,
+			Hooknum:  nftables.ChainHookPrerouting,
+			Priority: nftables.ChainPriorityRaw,
+			Policy:   policyPtr(nftables.ChainPolicyAccept),
+		},
+		"raw_output": {
+			Name:     "raw_output",
+			Table:    table,
+			Type:     nftables.ChainTypeFilter,
+			Hooknum:  nftables.ChainHookOutput,
+			Priority: nftables.ChainPriorityRaw,
+			Policy:   policyPtr(nftables.ChainPolicyAccept),
+		},
 	}

 	for name, chain := range chains {