cellinfo
/
ansible.nftables
2
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow icmp(v6) 

Allow pings and icmp traffic for both ipv4 and ipv6
This commit is contained in:
Leonardo 2020-05-24 09:51:27 +02:00 committed by GitHub
parent 88348aedab
commit 15c0bf1625
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -261,6 +261,8 @@ nft_input_default_rules:
- ip6 daddr @ip6blackhole counter drop - ip6 daddr @ip6blackhole counter drop
015 localhost: 015 localhost:
- iif lo accept - iif lo accept
050 icmp:
- meta l4proto {icmp,icmpv6} accept
200 input udp accepted: 200 input udp accepted:
- udp dport @in_udp_accept ct state new accept - udp dport @in_udp_accept ct state new accept
210 input tcp accepted: 210 input tcp accepted: