5 commits

Author	SHA1	Message	Date
TNE	46b2df60a5	nixos/nat: Allow NAT to still function when a forward default DROP iptables rule is in effect. ... This allows feature parity with the nftables "filterForward" firewall option when adding a ip forwarding default drop iptables rule.	2024-12-01 09:36:02 +01:00
TNE	622376ecb0	nixos/nat: Prevent NAT reflection on connections not coming from behind the NAT	2024-12-01 09:36:02 +01:00
TNE	6cb4e7d591	nixos/nat: Only connections made to the nat.externalIP will be port forwarded.	2024-12-01 09:36:02 +01:00
stuebinm	6afb255d97	nixos: remove all uses of lib.mdDoc ... these changes were generated with nixq 0.0.2, by running nixq ">> lib.mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix nixq ">> mdDoc[remove] Argument[keep]" --batchmode nixos/**.nix nixq ">> Inherit >> mdDoc[remove]" --batchmode nixos/**.nix two mentions of the mdDoc function remain in nixos/, both of which are inside of comments. Since lib.mdDoc is already defined as just id, this commit is a no-op as far as Nix (and the built manual) is concerned.	2024-04-13 10:07:35 -07:00
Rvfg	a43c7b2a70	nixos/{firewall, nat}: add a nftables based implementation	2022-12-23 00:49:24 +08:00