Simplified nftables rules
This commit is contained in:
parent
2718ea4106
commit
ff14b623de
@ -13,12 +13,9 @@ table inet filter {
|
||||
# Accept traffic originated from us.
|
||||
ct state { established, related } accept;
|
||||
|
||||
# Accept neighbour discovery otherwise IPv6 connectivity breaks.
|
||||
ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept;
|
||||
|
||||
# Accept all ICMP types.
|
||||
ip protocol icmp accept;
|
||||
ip6 nexthdr icmpv6 accept;
|
||||
# Accept ICMP and ICMPv6 traffic.
|
||||
meta l4proto icmp accept;
|
||||
meta l4proto ipv6-icmp accept;
|
||||
|
||||
# Accept SSH traffic.
|
||||
tcp dport 122 accept;
|
||||
|
Loading…
Reference in New Issue
Block a user