diff --git a/nftables-discuss.conf b/nftables-discuss.conf index 5f23611..97af3dc 100644 --- a/nftables-discuss.conf +++ b/nftables-discuss.conf @@ -25,7 +25,8 @@ table inet filter { iif lo accept tcp dport {22, 80, 443} ip daddr {{ipv4_address}} accept - tcp dport {22, 80, 443} ip6 daddr {{ipv6_address}} accept + # IPv6 interacts badly with IP-based spam filtering + #tcp dport {22, 80, 443} ip6 daddr {{ipv6_address}} accept meta l4proto {icmp, ipv6-icmp} accept ct state vmap { invalid : drop, established : accept, related : accept }