Don't need gateways

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>

firewall/nat.conf

@@ -1,16 +0,0 @@
-#!/usr/sbin/nft -f
-
-flush ruleset
-
-table ip nat {
-    chain prerouting {
-        type nat hook prerouting priority 0; policy accept;
-    }
-
-    chain postrouting {
-        type nat hook postrouting priority 0; policy accept;
-
-        ip saddr 10.2.1.0/30 masquerade;
-        ip saddr 172.17.0.0/16 masquerade;
-    }
-}

firewall/restrict-http.conf

@@ -8,6 +8,8 @@ table inet filter {
     }
     chain forward {
         type filter hook forward priority 0; policy accept
+        ip6 saddr fd00:42::/32 dport { 80 } reject;
+        ip6 daddr fd00:42::/32 dport { 80 } reject;
         accept
     }
     chain output {