From 423df41568023d0864908aba913b1d630db1ebe9 Mon Sep 17 00:00:00 2001 From: Alex Date: Tue, 14 Apr 2020 22:52:48 +0200 Subject: [PATCH] Accept ipv6-icmp packets, they are crucial for ipv6 functionality --- files/iptables-rules/rules.v6 | 1 + 1 file changed, 1 insertion(+) diff --git a/files/iptables-rules/rules.v6 b/files/iptables-rules/rules.v6 index 9b2bff8..5c43daf 100644 --- a/files/iptables-rules/rules.v6 +++ b/files/iptables-rules/rules.v6 @@ -3,6 +3,7 @@ :FORWARD DROP [0:0] :OUTPUT ACCEPT [10:1692] -A INPUT -m conntrack --ctstate INVALID -j DROP +-A INPUT -p ipv6-icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i ens10 -j ACCEPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT