Firewall Help
by CrazyCatLover from LinuxQuestions.org on (#54G8Q)
Hi, can anyone check my firewall configuration for debian, cause the nftables manuals are very confusing and i am not sure if i got it right... I mean windows has firewall but debian doesnt set it for you... Basically, i only want connection if started from "my side", everything else from the internet is dropped. Can i drop all icmp, even for ipv6? I just need a connection.. Also, is there some way to drop anything which seems "funny" if for example i accidentally click a wrong link. Thanks.
flush ruleset
table inet filter {
chain input
{
type filter hook input priority 0;
iif lo accept
ct state established,related accept
drop
}
chain forward
{
type filter hook input priority 0;
drop
}
chain output
{
type filter hook input priority 0;
drop
}
}


flush ruleset
table inet filter {
chain input
{
type filter hook input priority 0;
iif lo accept
ct state established,related accept
drop
}
chain forward
{
type filter hook input priority 0;
drop
}
chain output
{
type filter hook input priority 0;
drop
}
}