RedXen/ansible-common
RedXen
/
ansible-common
Archived
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Accept ipv6-icmp packets, they are crucial for ipv6 functionality

This commit is contained in:
Alex 2020-04-14 22:52:48 +02:00
parent 6721553a2d
commit 423df41568
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
files/iptables-rules/rules.v6
View File

@ -3,6 +3,7 @@
:FORWARD DROP [0:0] :FORWARD DROP [0:0]
:OUTPUT ACCEPT [10:1692] :OUTPUT ACCEPT [10:1692]
-A INPUT -m conntrack --ctstate INVALID -j DROP -A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT -A INPUT -i lo -j ACCEPT
-A INPUT -i ens10 -j ACCEPT -A INPUT -i ens10 -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT