tree 8da646df72ac5dd225ab076f9dda40fdf85d1a8b
parent a7a7ed08b2d02ef746631894cfae6e6b00a41fef
author William A. Kennington III <wak@google.com> 1620806261 -0700
committer William A. Kennington III <wak@google.com> 1620850635 +0000

meta-google: gbmc-ncsi-nft: More forward restriction

We only want to allow <pfx>::fd... traffic info the machine area network
from the outside world. Instead of just blocking internal network
addresses from the outside, explicitly look at the prefix.

Change-Id: Id0afef7c813aef381e81b8fcfb570778f529f5dc
Signed-off-by: William A. Kennington III <wak@google.com>