Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-10-01 00:55:42 -04:00
Code Issues Packages Projects Releases Wiki Activity

disable services on IPv6 for discussion forum

Browse Source
This commit is contained in:
Daniel Micay 2023-12-22 17:45:10 -05:00
parent 8bfec062dc
commit 15a2fa132f
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nftables-discuss.conf
View File

@ -25,7 +25,8 @@ table inet filter {
iif lo accept iif lo accept
tcp dport {22, 80, 443} ip daddr {{ipv4_address}} accept tcp dport {22, 80, 443} ip daddr {{ipv4_address}} accept
tcp dport {22, 80, 443} ip6 daddr {{ipv6_address}} accept # IPv6 interacts badly with IP-based spam filtering
#tcp dport {22, 80, 443} ip6 daddr {{ipv6_address}} accept
meta l4proto {icmp, ipv6-icmp} accept meta l4proto {icmp, ipv6-icmp} accept
ct state vmap { invalid : drop, established : accept, related : accept } ct state vmap { invalid : drop, established : accept, related : accept }