networking.firewall.extraReversePathFilterRules

Additional nftables rules to be appended to the rpfilter-allow chain.

This option only works with the nftables based firewall.

Type

strings concatenated with "\n"

Default

""

Example

"fib daddr . mark . iif type local accept"

Declared

<nixpkgs/nixos/modules/services/networking/firewall-nftables.nix>