nftblock 0.1.2

Atomically apply CIDR lists with nftables netlink batches
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

[files]
inbound = "/data/inbound.txt"
outbound = "/data/outbound.txt"

[zones]
WAN = ["eth0"]
LOCAL = { interfaces = [], local = true }
LAN = ["eth1"]
GUEST = ["eth2"]
VPN1 = ["wg0"]
VPN2 = ["wg1"]

[nftables]
table = "nftblock"
priority = -5
batch_page_bytes = 262144
populate_batch_elements = 100000
allow_flowtable_bypass = false

[runtime]
debounce_ms = 500
reconcile_secs = 60

[[rules.input]]
blocklist = "inbound"
ingress_zones = ["WAN"]

[[rules.forward]]
blocklist = "inbound"
ingress_zones = ["WAN"]
egress_zones = ["LAN", "GUEST"]

[[rules.output]]
blocklist = "outbound"
egress_zones = ["WAN"]

[[rules.forward]]
blocklist = "outbound"
ingress_zones = ["LAN", "GUEST", "VPN1", "VPN2"]
egress_zones = ["WAN"]