summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/nftables.conf.j2
Commit message (Collapse)AuthorAgeFiles
* Firewall: Use `meta secpath exists` to match xfrm associations.Guilhem Moulin2020-05-181
| | | | | Marking incoming ESP packets and matching decapsulated packets doesn't work with NAT traverslate (UDP encapsulation aka MOBIKE).
* typofixGuilhem Moulin2020-05-161
|
* Upgrade baseline to Debian 10.Guilhem Moulin2020-05-161
|
* Convert firewall to nftables.Guilhem Moulin2020-01-231
Debian Buster uses the nftables framework by default.