diff --git a/nftables-network.conf b/nftables-network.conf index dd1b9f4..6c24d78 100644 --- a/nftables-network.conf +++ b/nftables-network.conf @@ -8,7 +8,7 @@ table inet filter { iif lo notrack accept tcp dport {22, 80, 443, 7275} notrack accept - udp dport 123 notrack accept; + udp dport 123 notrack accept meta l4proto {icmp, ipv6-icmp} notrack accept } @@ -17,7 +17,7 @@ table inet filter { oif lo notrack accept tcp sport {22, 80, 443, 7275} notrack accept - udp sport 123 notrack accept; + udp sport 123 notrack accept meta l4proto {icmp, ipv6-icmp} notrack accept }