From cb5fa2147d792ef158d75bcf14843e9dea975485 Mon Sep 17 00:00:00 2001 From: Radek Zajic Date: Tue, 28 Apr 2020 09:18:42 +0200 Subject: [PATCH] Allow all types of ICMP packets in ip6tables rules (#105) --- airootfs/etc/iptables/ip6tables.rules | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/airootfs/etc/iptables/ip6tables.rules b/airootfs/etc/iptables/ip6tables.rules index 4fa3ee5..f0846ec 100644 --- a/airootfs/etc/iptables/ip6tables.rules +++ b/airootfs/etc/iptables/ip6tables.rules @@ -5,7 +5,7 @@ -N LOGDROP -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT --A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m conntrack --ctstate NEW -j ACCEPT +-A INPUT -p ipv6-icmp -j ACCEPT -A INPUT -j LOGDROP -A LOGDROP -m limit --limit 10/sec -j LOG --log-prefix "iptables-dropped: " -A LOGDROP -j DROP