#!/usr/sbin/nft -f

flush ruleset

table inet filter {
	chain input {
		type filter hook input priority filter;
	}
	chain forward {
		type filter hook forward priority filter;
	}
	chain output {
		type filter hook output priority filter;
	}
}

table inet nat {
	chain postrouting {
		type nat hook postrouting priority srcnat;
		ip saddr 10.0.0.0/22 oifname "enp3s0" masquerade
	}
}

# Port-Forwards, verwaltet über `ipadm -pa`/`ipadm -pd` + `ipadm -u` (siehe tools/ipadm im Router-Repo)
include "/etc/nftables.d/*.conf"