nftables fix ipv6 (allow ICMP)
This commit is contained in:
parent
a37eebfd29
commit
9de094f09f
1 changed files with 3 additions and 3 deletions
|
@ -11,9 +11,9 @@ table inet filter {
|
|||
ct state invalid drop
|
||||
ct state { established, related } accept
|
||||
|
||||
# Allow ICMP ping
|
||||
meta nfproto ipv4 icmp type echo-request limit rate 1/second accept
|
||||
meta nfproto ipv6 icmpv6 type echo-request limit rate 1/second accept
|
||||
# Allow ICMP
|
||||
meta l4proto icmp limit rate 2/second accept
|
||||
meta l4proto ipv6-icmp limit rate 2/second accept
|
||||
|
||||
# SSH
|
||||
tcp dport 995 limit rate 15/minute accept
|
||||
|
|
Loading…
Reference in a new issue