Allow icmp(v6)

Allow pings and icmp traffic for both ipv4 and ipv6
2020-05-24 09:51:27 +02:00 · 2020-05-24 09:51:27 +02:00 · 15c0bf1625
parent 88348aedab
commit 15c0bf1625
1 changed files with 2 additions and 0 deletions
--- a/defaults/main.yml
+++ b/defaults/main.yml
@ -261,6 +261,8 @@ nft_input_default_rules:
    - ip6 daddr @ip6blackhole counter drop
  015 localhost:
    - iif lo accept
+  050 icmp:
+    - meta l4proto {icmp,icmpv6} accept
  200 input udp accepted:
    - udp dport @in_udp_accept ct state new accept
  210 input tcp accepted: