chainactionsrcdstprotoportкомментарий
inputaccept192.168.88.0/24—tcp22SSH LAN
inputdrop0.0.0.0/0—tcp23block telnet
forwardfwdLANWANall—NAT out
inputaccept10.8.0.0/24—udp51820WireGuard
inputdrop0.0.0.0/0—icmp—no ping WAN
forwardacceptLAN10.0.0.0/8tcp443HTTPS