bundles/nftables: improve handling for icmp
This commit is contained in:
parent
c6421c7bd4
commit
423049667f
1 changed files with 1 additions and 2 deletions
|
@ -23,9 +23,8 @@ table inet filter {
|
||||||
|
|
||||||
icmp type timestamp-request drop
|
icmp type timestamp-request drop
|
||||||
icmp type timestamp-reply drop
|
icmp type timestamp-reply drop
|
||||||
ip protocol icmp accept
|
meta l4proto {icmp, ipv6-icmp} accept
|
||||||
|
|
||||||
ip6 nexthdr ipv6-icmp accept
|
|
||||||
% for ruleset, rules in sorted(input.items()):
|
% for ruleset, rules in sorted(input.items()):
|
||||||
|
|
||||||
# ${ruleset}
|
# ${ruleset}
|
||||||
|
|
Loading…
Reference in a new issue