diff --git a/backend/modules/nfproxy/nftables.py b/backend/modules/nfproxy/nftables.py index 046d98d..6aa7c71 100644 --- a/backend/modules/nfproxy/nftables.py +++ b/backend/modules/nfproxy/nftables.py @@ -34,7 +34,7 @@ class FiregexTables(NFTableManager): "name":self.input_chain, "type":"filter", "hook":"prerouting", - "prio":-310, + "prio":-308, "policy":"accept" }}}, {"add":{"chain":{ #Output chain attached after conntrack saw it @@ -43,7 +43,7 @@ class FiregexTables(NFTableManager): "name":self.output_chain, "type":"filter", "hook":"postrouting", - "prio":-310, + "prio":108, "policy":"accept" }}} ],[ diff --git a/backend/modules/nfregex/nftables.py b/backend/modules/nfregex/nftables.py index c352226..baaab10 100644 --- a/backend/modules/nfregex/nftables.py +++ b/backend/modules/nfregex/nftables.py @@ -26,7 +26,7 @@ class FiregexTables(NFTableManager): "name":self.input_chain, "type":"filter", "hook":"prerouting", - "prio":-301, + "prio":-307, "policy":"accept" }}}, {"add":{"chain":{ @@ -35,7 +35,7 @@ class FiregexTables(NFTableManager): "name":self.output_chain, "type":"filter", "hook":"postrouting", - "prio":-301, + "prio":107, "policy":"accept" }}} ],[ diff --git a/backend/modules/porthijack/nftables.py b/backend/modules/porthijack/nftables.py index 0590b2f..05d77ff 100644 --- a/backend/modules/porthijack/nftables.py +++ b/backend/modules/porthijack/nftables.py @@ -37,7 +37,7 @@ class FiregexTables(NFTableManager): "name":self.postrouting_porthijack, "type":"filter", "hook":"postrouting", - "prio":-310, + "prio":110, "policy":"accept" }}} ],[