From 15c0bf1625e70f89e0c4ae2a8d505a8257c37287 Mon Sep 17 00:00:00 2001
From: Leonardo <14614620+aardbol@users.noreply.github.com>
Date: Sun, 24 May 2020 09:51:27 +0200
Subject: [PATCH] Allow icmp(v6)

Allow pings and icmp traffic for both ipv4 and ipv6
---
 defaults/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/defaults/main.yml b/defaults/main.yml
index c901a16..86b73ef 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -261,6 +261,8 @@ nft_input_default_rules:
     - ip6 daddr @ip6blackhole counter drop
   015 localhost:
     - iif lo accept
+  050 icmp:
+    - meta l4proto {icmp,icmpv6} accept
   200 input udp accepted:
     - udp dport @in_udp_accept ct state new accept
   210 input tcp accepted: