evolix
/
minifirewall
21
0
Fork 0
Code Issues 4 Pull Requests 3 Releases 1 Activity

Accept any ICMPv6 input traffic

This commit is contained in:
Tristan PILAT 2020-11-18 18:01:09 +01:00
parent 36634a705f
commit 86ffdfc916
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
minifirewall-start.sh
View File

@ -165,6 +165,7 @@ $NFT add rule inet minifirewall minifirewall_input ct state invalid drop
# ICMP and IGMP traffic is accepted
$NFT add rule inet minifirewall minifirewall_input ip protocol icmp accept
$NFT add rule inet minifirewall minifirewall_input meta l4proto ipv6-icmp accept
$NFT add rule inet minifirewall minifirewall_input ip protocol igmp accept
# New UDP traffic from blocked IPs jumps to the private_udp_ports chain