diff --git a/nftables.conf b/nftables.conf index 9878bbf..873094b 100755 --- a/nftables.conf +++ b/nftables.conf @@ -11,15 +11,15 @@ table inet filter { ct state invalid drop ct state { established, related } accept - # Allow ICMP - meta l4proto icmp limit rate 2/second accept - meta l4proto ipv6-icmp limit rate 2/second accept - + # HTTP + tcp dport { http, https } limit rate 5/second accept + # SSH tcp dport 995 limit rate 15/minute accept - # HTTP - tcp dport { http, https } limit rate 25/second accept + # Allow ICMP + meta l4proto icmp limit rate 1/second accept + meta l4proto ipv6-icmp limit rate 1/second accept } chain forward {