From: Zoltán Felleg <zoltan.felleg@userrendszerhaz.hu>
Date: Wed, 29 Oct 2025 08:08:51 +0000 (+0100)
Subject: Updated efg.pm (added mx.pm rules).
X-Git-Url: http://git.useribm.hu/?a=commitdiff_plain;h=e15891b7018c710423672d7e4fbace2b49ae9762;p=user-lxc.git

Updated efg.pm (added mx.pm rules).
---

diff --git a/sources/efg.pm/c3d/firstboot/data/nftables.config b/sources/efg.pm/c3d/firstboot/data/nftables.config
index cfb64af..31fa22b 100644
--- a/sources/efg.pm/c3d/firstboot/data/nftables.config
+++ b/sources/efg.pm/c3d/firstboot/data/nftables.config
@@ -263,6 +263,17 @@ add rule ip efg-filter forward \
     oifname $EXTERNAL_IF tcp dport 1024-65535 \
     counter accept comment "Outgoing MX replies"
 
+add rule ip efg-filter forward \
+    iifname $PERIMETER_IF ip saddr $MX_PERIMETER_IPV4 tcp sport 1024-65535 \
+    oifname $EXTERNAL_IF tcp dport $MX_PORTS \
+    counter accept comment "Outgoing MX requests"
+
+add rule ip efg-filter forward \
+    ct state established \
+    iifname $EXTERNAL_IF tcp sport $MX_PORTS \
+    oifname $PERIMETER_IF ip daddr $MX_PERIMETER_IPV4 tcp dport 1024-65535 \
+    counter accept comment "Incoming MX replies"
+
 add rule ip efg-filter forward \
     iifname $EXTERNAL_IF \
     oifname $PERIMETER_IF ip daddr $NETLOCK_INTERNAL_IPV4 tcp dport ssh \