Git-Mirrors
/
graphene-os-server-infrastructure
mirror of https://github.com/GrapheneOS/infrastructure.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

allow IPv6 SSH for discuss.grapheneos.org 

This could be useful and disabling it isn't necessary for blocking IPv6
connections to the forum.
This commit is contained in:
Daniel Micay 2024-03-24 15:41:13 -04:00
parent 7b64ffd4cd
commit 0ac67c38c3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nftables-discuss.conf
View File

@ -15,7 +15,7 @@ table inet filter {
fib daddr . iif type != { local, broadcast, multicast } counter drop
# IPv6 interacts badly with IP-based spam filtering
meta nfproto ipv6 tcp dport {22, 80, 443} reject with tcp reset
meta nfproto ipv6 tcp dport {80, 443} reject with tcp reset
tcp dport {22, 80, 443} notrack accept
meta l4proto {icmp, ipv6-icmp} notrack accept