diff --git a/nftables.conf b/nftables.conf index 5cbfc21..9878bbf 100755 --- a/nftables.conf +++ b/nftables.conf @@ -11,9 +11,9 @@ table inet filter { ct state invalid drop ct state { established, related } accept - # Allow ICMP ping - meta nfproto ipv4 icmp type echo-request limit rate 1/second accept - meta nfproto ipv6 icmpv6 type echo-request limit rate 1/second accept + # Allow ICMP + meta l4proto icmp limit rate 2/second accept + meta l4proto ipv6-icmp limit rate 2/second accept # SSH tcp dport 995 limit rate 15/minute accept