Simplified nftables rules

This commit is contained in:
Héctor Molinero Fernández 2021-12-24 14:33:12 +01:00
parent 2718ea4106
commit ff14b623de

View File

@ -13,12 +13,9 @@ table inet filter {
# Accept traffic originated from us.
ct state { established, related } accept;
# Accept neighbour discovery otherwise IPv6 connectivity breaks.
ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept;
# Accept all ICMP types.
ip protocol icmp accept;
ip6 nexthdr icmpv6 accept;
# Accept ICMP and ICMPv6 traffic.
meta l4proto icmp accept;
meta l4proto ipv6-icmp accept;
# Accept SSH traffic.
tcp dport 122 accept;