cellinfo
/
ansible.nftables
2
0
Fork 0
Code Issues Pull Requests Releases Activity

Merge branch 'aardbol-patch-1' - input ICMPv6

This commit is contained in:
Jeremy Gardais 2020-06-02 08:34:41 +02:00
parent 88348aedab 15c0bf1625
commit 1fe24f01e4
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -261,6 +261,8 @@ nft_input_default_rules:
- ip6 daddr @ip6blackhole counter drop - ip6 daddr @ip6blackhole counter drop
015 localhost: 015 localhost:
- iif lo accept - iif lo accept
050 icmp:
- meta l4proto {icmp,icmpv6} accept
200 input udp accepted: 200 input udp accepted:
- udp dport @in_udp_accept ct state new accept - udp dport @in_udp_accept ct state new accept
210 input tcp accepted: 210 input tcp accepted: