User defined whitelist filter

[LeeSmet]

File based whitelist filter which specified allowed remotes (subnet/ip/pub key), which can talk to the local node. Ideally this includes src and dst port as well. By default, non listed addresses cause the packet to get dropped.

[flokli]

Isn't this something that can already be solved on the nftables/iptables layer?

[iwanbk]

Isn't this something that can already be solved on the nftables/iptables layer?

maybe to make it work on different OS?

[flokli]

Probably, though there's some small distinctions here. Are we talking about networking traffic destined to the local node, messages in general, forwarding, …

[LeeSmet]

This would be for packets destined to the local node yes. Essentially it would sit just before the tun interface for incoming packets