summaryrefslogtreecommitdiffstats
path: root/modules
diff options
context:
space:
mode:
authorlassulus <lass@aidsballs.de>2015-06-01 03:10:06 +0200
committerlassulus <lass@aidsballs.de>2015-06-01 03:10:06 +0200
commitda8694ed1197d943a9f635f237f2b2339236f9eb (patch)
tree220f1896f45ab751e531a69ac1b1b6687f827c67 /modules
parentb07eb816b3d985ceb705cba30fea119e1c956eaa (diff)
base: allow icmp on all interfaces
Diffstat (limited to 'modules')
-rw-r--r--modules/lass/base.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/lass/base.nix b/modules/lass/base.nix
index 87127fb80..3a8d879eb 100644
--- a/modules/lass/base.nix
+++ b/modules/lass/base.nix
@@ -94,10 +94,10 @@
extraCommands = ''
iptables -A INPUT -j ACCEPT -m conntrack --ctstate RELATED,ESTABLISHED
iptables -A INPUT -j ACCEPT -i lo
+ iptables -A INPUT -j ACCEPT -p icmp
#iptables -N Retiolum
iptables -A INPUT -j Retiolum -i retiolum
- iptables -A Retiolum -j ACCEPT -p icmp
iptables -A Retiolum -j ACCEPT -m conntrack --ctstate RELATED,ESTABLISHED
iptables -A Retiolum -j REJECT -p tcp --reject-with tcp-reset
iptables -A Retiolum -j REJECT -p udp --reject-with icmp-port-unreachable