patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

fix: disable nftables based mdns relay

Browse source
This commit is contained in:
Patrick 2024-12-31 17:55:42 +01:00
parent 2c8b67b8f9
commit aeba7c71e4
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
1 changed files with 0 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
hosts/nucnix/forwarding.nix
View file

@ -82,26 +82,4 @@ mkMerge [
];
protocol = "udp";
})
{
networking.nftables.ruleset = ''
table ip mdns {
chain prerouting {
type filter hook prerouting priority mangle; policy accept;
iifname {lan-home, lan-services} ip daddr 224.0.0.251 meta mark 0xa5f3 jump mdns-saddr
iifname {lan-home, lan-services} ip daddr 224.0.0.251 meta mark != 0xa5f3 jump mdns
}
chain mdns {
meta mark set 0xa5f3
iifname lan-services dup to 224.0.0.251 device lan-home
iifname lan-home dup to 224.0.0.251 device lan-services
}
chain mdns-saddr {
# repeat mDNS from IoT to main
iifname lan-services ip saddr set 10.99.20.1
iifname lan-home ip saddr set 10.99.10.1
}
}
'';
}
]