From 15a2fa132f657d499ac2c6bfda41a8cc13c7b27a Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Fri, 22 Dec 2023 17:45:10 -0500
Subject: [PATCH] disable services on IPv6 for discussion forum

---
 nftables-discuss.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nftables-discuss.conf b/nftables-discuss.conf
index 5f23611..97af3dc 100644
--- a/nftables-discuss.conf
+++ b/nftables-discuss.conf
@@ -25,7 +25,8 @@ table inet filter {
 
         iif lo accept
         tcp dport {22, 80, 443} ip daddr {{ipv4_address}} accept
-        tcp dport {22, 80, 443} ip6 daddr {{ipv6_address}} accept
+        # IPv6 interacts badly with IP-based spam filtering
+        #tcp dport {22, 80, 443} ip6 daddr {{ipv6_address}} accept
         meta l4proto {icmp, ipv6-icmp} accept
 
         ct state vmap { invalid : drop, established : accept, related : accept }