restrict the outgoing traffic

threefoldtech · Sep 10, 2024 · e56ea0d · e56ea0d
1 parent 146e178
commit e56ea0d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cmds/modules/netlightd/nft/rules.nft b/cmds/modules/netlightd/nft/rules.nft
@@ -8,7 +8,8 @@ table inet filter {
 	}
 
 	chain output {
-		type filter hook output priority filter; policy accept;
+		type filter hook output priority filter; policy drop;
+		ip daddr 192.168.1.1 accept # the router ip
 	}
 
 	chain prerouting {