mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2025-07-01 09:56:43 -04:00
allow IPv6 SSH for discuss.grapheneos.org
This could be useful and disabling it isn't necessary for blocking IPv6 connections to the forum.
This commit is contained in:
parent
7b64ffd4cd
commit
0ac67c38c3
1 changed files with 1 additions and 1 deletions
|
@ -15,7 +15,7 @@ table inet filter {
|
|||
fib daddr . iif type != { local, broadcast, multicast } counter drop
|
||||
|
||||
# IPv6 interacts badly with IP-based spam filtering
|
||||
meta nfproto ipv6 tcp dport {22, 80, 443} reject with tcp reset
|
||||
meta nfproto ipv6 tcp dport {80, 443} reject with tcp reset
|
||||
|
||||
tcp dport {22, 80, 443} notrack accept
|
||||
meta l4proto {icmp, ipv6-icmp} notrack accept
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue