|
|
|
|
|
|
by kanbankaren
449 days ago
|
|
|
Yes. You could match packets based on username or even SELinux labels. You could also set a special mark on a packet for each container and then filter based on that. The Internet is surprsingly very thin on nft resources. I spent a few weeks learning how to write them. Definitely, not for the average consumer. |
|
|