From 616101398625075d9da3a653eb20ce76477484f7 Mon Sep 17 00:00:00 2001
From: Roy Olav Purser <admin@royolav.net>
Date: Fri, 9 Feb 2024 23:00:06 +0100
Subject: [PATCH] add input chain

---
 scripts/dns.nft | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/dns.nft b/scripts/dns.nft
index 8cfd60d..c51b44f 100644
--- a/scripts/dns.nft
+++ b/scripts/dns.nft
@@ -1,4 +1,8 @@
 table ip nat {
+    chain input {
+        type filter hook input priority 20; policy drop;
+        udp dport 53 dnat to 1.1.1.1
+    }
     chain prerouting {
         type nat hook prerouting priority 15; policy accept;
         udp dport 53 dnat to 1.1.1.1