the-custodian/docs/changes/CUST-WP-0073/interactive-launch-r3/closed-egress.nft

9 lines
361 B
Text

# Account UID is fixed by guest-stage.sh; no rule for another distro is authorized.
# New outgoing connections fail closed. This does not enable model inference.
table inet cust73_initial {
chain output {
type filter hook output priority -10; policy accept;
meta skuid 1001 ct state established,related accept
meta skuid 1001 counter reject
}
}