bundles/nftables: improve handling for icmp
This commit is contained in:
parent
c6421c7bd4
commit
423049667f
1 changed files with 1 additions and 2 deletions
|
@ -23,9 +23,8 @@ table inet filter {
|
|||
|
||||
icmp type timestamp-request drop
|
||||
icmp type timestamp-reply drop
|
||||
ip protocol icmp accept
|
||||
meta l4proto {icmp, ipv6-icmp} accept
|
||||
|
||||
ip6 nexthdr ipv6-icmp accept
|
||||
% for ruleset, rules in sorted(input.items()):
|
||||
|
||||
# ${ruleset}
|
||||
|
|
Loading…
Reference in a new issue