>>102018915
How does that affect anything?
>>102018950
He's just stupid.
>>102018015
>block all connections coming from outside my lan
Is your local net really a globally routable one???? Usually people don't have to do anything as they are in a private net.
But oh well, here's a basic "don't answer anyone" rule set:
flush ruleset
table inet my_table {
chain my_input {
type filter hook input priority filter; policy drop;
iif "lo" accept comment "Localhost"
ip saddr { 192.168.1.0/24, 169.254.0.0/16 } accept
ip6 saddr f000::/4 accept
ct state invalid drop comment "Invalid connections"
ct state established,related accept comment "Traffic originated from us"
ip protocol icmp icmp type { destination-unreachable, router-advertisement, router-solicitation, time-exceeded, parameter-problem } accept comment "ICMP"
}
chain my_forward { type filter hook forward priority filter; policy accept; }
chain my_output { type filter hook output priority filter; policy accept; }
chain prerouting { type nat hook prerouting priority filter; policy accept; }
}
>192.168.1.0/24
Change it to whatever you got.
>f000::/4
Don't worry, it just lumps together a bunch of all kinds of local broadcast type of IPs. Everything that starts with "f" can't be from le internets.
>>102019515
idk but they will keep knocking. Mostly just a nuisance seeing your logs filled with login attempts.
