Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-07-28 17:24:08 -04:00
Code Issues Projects Releases Packages Wiki Activity

allow IPv6 SSH for discuss.grapheneos.org

Browse source 
This could be useful and disabling it isn't necessary for blocking IPv6
connections to the forum.
This commit is contained in:
Daniel Micay 2024-03-24 15:41:13 -04:00
parent 7b64ffd4cd
commit 0ac67c38c3
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nftables-discuss.conf
View file

@ -15,7 +15,7 @@ table inet filter {
fib daddr . iif type != { local, broadcast, multicast } counter drop
# IPv6 interacts badly with IP-based spam filtering
meta nfproto ipv6 tcp dport {22, 80, 443} reject with tcp reset
meta nfproto ipv6 tcp dport {80, 443} reject with tcp reset
tcp dport {22, 80, 443} notrack accept
meta l4proto {icmp, ipv6-icmp} notrack accept