change nftables role

2026-08-28 11:10:51 +00:00
parent abeb2e0eb9
commit 271c290498
8 changed files with 104 additions and 154 deletions
@@ -3,13 +3,14 @@ chain proxy_prerouting {

    fib daddr type local accept

-    include "/etc/nftables.d/90-proxy.nft"
+    meta mark 0x00000001 iif "lo" meta l4proto { tcp, udp } tproxy ip to :61219 counter accept
+
+    include "/etc/nftables.d/90-proxy-prerouting.nft"
 }

 chain proxy_output {
    type route hook output priority mangle; policy accept;

-    #meta mark 0x000000ff return
-
-    #meta l4proto { tcp, udp } ip daddr @cloudflare_ip meta mark set 0x00000001 accept
+    meta mark != 0 return
+    include "/etc/nftables.d/90-proxy-output.nft"
 }