zentralwerk/network
zentralwerk
/
network
12
4
Fork 2
Code Issues 4 Pull Requests 1 Releases Wiki Activity

upstream: accept icmpv6

This commit is contained in:
Astro 2018-09-13 23:46:28 +02:00
parent 5e53d1b9ce
commit 57d5d7f093
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
salt/upstream/iptables
View File

@ -10,7 +10,7 @@ if [ "$IFACE" = "{{ interface }}" ]; then
iptables -A INPUT -i "$IFACE" -m state --state ESTABLISHED,RELATED -j ACCEPT
ip6tables -A INPUT -i "$IFACE" -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i "$IFACE" -p icmp -j ACCEPT
ip6tables -A INPUT -i "$IFACE" -p icmp -j ACCEPT
ip6tables -A INPUT -i "$IFACE" -p icmpv6 -j ACCEPT
# DHCPv6
ip6tables -A INPUT -i "$IFACE" -p udp --sport 547 --dport 546 -j ACCEPT
iptables -A INPUT -i "$IFACE" -j DROP