Tomas Volf 82f9e5ac97 services: nftables: Tighten the default rules. ... Packets for local host IP ranges should be coming only over lo. If that is not the case, we should drop them. Use iif for the check instead of iifname, lo is guaranteed to exists, and iif is faster. * gnu/services/networking.scm (%default-nftables-ruleset): Tighten the rules. Signed-off-by: Ludovic Courtès <ludo@gnu.org>		2023-10-20 00:33:26 +02:00
..
admin.scm	services: file-database: Clarify 'excluded-directories' description.	2023-08-22 11:17:53 +02:00
audio.scm	services: configuration: Add some commonly used predicates.	2023-10-07 12:41:06 -04:00
auditd.scm
authentication.scm	services: Use more 'file-append'.	2023-08-15 23:30:44 +02:00
avahi.scm
base.scm	services: static-networking: Add support for bonding.	2023-10-11 18:51:07 +02:00
certbot.scm
cgit.scm	services: cgit: Allow file-like objects for ‘root-readme’.	2023-09-09 15:54:37 +02:00
ci.scm
configuration.scm	services: configuration: Add some commonly used predicates.	2023-10-07 12:41:06 -04:00
cuirass.scm	services: cuirass: Add ‘log-expiry’ option for ‘remote-server’.	2023-10-12 22:14:34 +02:00
cups.scm
databases.scm	services: posgresql: Add option to specify UID/GID for postgres user.	2023-08-16 22:37:52 +02:00
dbus.scm
desktop.scm	Merge remote-tracking branch 'origin/master' into kde-updates	2023-08-17 18:38:23 +08:00
dict.scm	home: services: Add dicod.	2023-08-20 22:48:47 +02:00
dns.scm	Revert "services: Add ddclient service."	2023-08-16 23:13:55 +02:00
docker.scm	file-systems: Use cgroups v2.	2023-08-08 18:01:55 +02:00
file-sharing.scm
games.scm
ganeti.scm
getmail.scm
guix.scm	services: bffe: Use guile from the package.	2023-09-15 11:10:43 +01:00
herd.scm
hurd.scm
kerberos.scm	services: Use more 'file-append'.	2023-08-15 23:30:44 +02:00
ldap.scm
lightdm.scm
linux.scm	services: fstrim-service-type: Serialize with SRFI-171 transducers.	2023-10-07 12:41:05 -04:00
lirc.scm
mail.scm
mcron.scm	services: mcron: Hide ‘mkdir-p’ from (shepherd support).	2023-10-05 23:14:55 +02:00
messaging.scm
monitoring.scm
networking.scm	services: nftables: Tighten the default rules.	2023-10-20 00:33:26 +02:00
nfs.scm
nix.scm
pam-mount.scm	services: Use more 'file-append'.	2023-08-15 23:30:44 +02:00
pm.scm
rsync.scm
samba.scm
science.scm
sddm.scm	services: sddm: Set some environment variables for the breeze theme.	2023-08-02 22:27:43 +08:00
security-token.scm
security.scm
shepherd.scm
sound.scm
spice.scm
ssh.scm
syncthing.scm	services: syncthing: Ensure that service runs after mounting home directories.	2023-09-17 15:31:03 +02:00
sysctl.scm
telephony.scm	services: configuration: Add some commonly used predicates.	2023-10-07 12:41:06 -04:00
version-control.scm
virtualization.scm	services: hurd-vm: Leave root password uninitialized when offloading.	2023-10-05 23:14:55 +02:00
vnc.scm
vpn.scm	services: vpn: Fix broken format string for wireguard dns.	2023-09-09 12:24:12 +02:00
web.scm
xorg.scm