summaryrefslogtreecommitdiffstats
path: root/lass/2configs/default.nix
diff options
context:
space:
mode:
authorlassulus <lass@lassul.us>2017-02-09 16:57:54 +0100
committerlassulus <lass@lassul.us>2017-02-09 16:57:54 +0100
commit51761c3b9ba7c994e269328ab68e71318c9fbc34 (patch)
treec5ec111145e733577e1d78925ddd65bdf323a6ff /lass/2configs/default.nix
parent137c49b847a896009972a3fa7ad2f60358c0a643 (diff)
l 2: allow ipv6-icmp
Diffstat (limited to 'lass/2configs/default.nix')
-rw-r--r--lass/2configs/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix
index d1810c00c..2441f1b74 100644
--- a/lass/2configs/default.nix
+++ b/lass/2configs/default.nix
@@ -202,6 +202,7 @@ with import <stockholm/lib>;
filter.INPUT.rules = [
{ predicate = "-m conntrack --ctstate RELATED,ESTABLISHED"; target = "ACCEPT"; precedence = 10001; }
{ predicate = "-p icmp"; target = "ACCEPT"; precedence = 10000; }
+ { predicate = "-p ipv6-icmp"; target = "ACCEPT"; v4 = false; precedence = 10000; }
{ predicate = "-i lo"; target = "ACCEPT"; precedence = 9999; }
{ predicate = "-p tcp --dport 22"; target = "ACCEPT"; precedence = 9998; }
{ predicate = "-p tcp -i retiolum"; target = "REJECT --reject-with tcp-reset"; precedence = -10000; }