Re: aggressive firewalling via nftables
"Kevin P. Fleming" <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Jan 6, 2025, at 11:27, [email protected] wrote: > Things like QUIC should work as well, since the TCP handshake goes > through, and the UDP traffic afterwards should be allowed by "ct state > established, related accept" in the main file (not tested). A small clarification: QUIC does not use TCP at all, not even for an initial handshake. It is entirely UDP-based.