9 lines
727 B
Markdown
9 lines
727 B
Markdown
|
this script makes nftables allows only bunny.net ips on some port so it's a must if you're using that cdn \
|
||
|
|
|
||
|
|
# Usage
|
||
|
|
By default it only affects port `31491`, oddly specific but that's because it's recommended to use a random port for hidden services. But if you use it it's not random anymore so get your own \
|
||
|
|
You can also add your own filter rules \
|
||
|
|
You must schedule the script, like with crontab or systemd. \
|
||
|
|
The output ruleset is saved in `rules.nft` and ⚠️ `sudo nft -f rules.nft` is executed to apply that ruleset. The reason ⚠️ is because you might not want to do sudo and instead do safer stuff like I don't know \
|
||
|
|
Only legacy internet protocol (also called IPv4 (ew)) is supported at this time. Not my fault
|