16 lines
462 B
Plaintext
16 lines
462 B
Plaintext
#!/usr/sbin/nft -f
|
|
# Only your Omarchy machine may reach the robot's audio (4713) and MCP (8765) ports.
|
|
# Everything else, SSH included, is left alone. __HOST_IP__ is filled in by install.sh.
|
|
|
|
table inet robot
|
|
delete table inet robot
|
|
|
|
table inet robot {
|
|
chain input {
|
|
type filter hook input priority 0; policy accept;
|
|
iif "lo" accept
|
|
ip saddr __HOST_IP__ tcp dport { 4713, 8765 } accept
|
|
tcp dport { 4713, 8765 } drop
|
|
}
|
|
}
|