pkgname=intergenos-firewall-defaults
pkgver=1.0.0
pkgrel=4
pkgdesc=InterGenOS default-deny nftables policy per D-011 requirement. Ships /etc/nftables.conf with default-drop INPUT/FORWARD + established/related + loopback + ICMP echo-request + frag-needed allowed, plus a bridge-scoped DHCP/DNS accept for libvirt NAT guests. SSH closed by default.
license=GPL-3.0-or-later
tier=core
builddate=2026-08-06T00:30:21Z
size=42572
filecount=2
depend=nftables
