blob: f5d4404caf7629495d69275e71846ae3681fcbe1 [file] [log] [blame]
#!/usr/sbin/nft -f
flush ruleset
table inet filter {
chain input {
type filter hook input priority 0;
}
chain forward {
type filter hook forward priority 0;
}
chain output {
type filter hook output priority 0;
}
}
table ip nat {
chain postrouting {
type nat hook postrouting priority 100; policy accept;
ip saddr SUBNET_CIDR oif "INTERFACE" snat to EDGE_IP
}
}