graphene-os-server-infrastr.../etc/nftables
Daniel Micay cb01ad4f20 nftables: block IPv6 for forum web server
We used to have this but it was lost during changes to our firewall
rules. We don't have an AAAA record for discuss.grapheneos.org to avoid
IPv6 connections but should also be explicitly blocking it. We're doing
this due to reliance on IP bans for registration to block spammers and
having IPv6 would greatly weaken it even if banning based on /64.
2025-08-28 11:25:11 -04:00
..
nftables-attestation.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-discuss.conf nftables: block IPv6 for forum web server 2025-08-28 11:25:11 -04:00
nftables-mail.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-matrix.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-network.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-ns1.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-ns2.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-social.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00
nftables-web.conf switch SSH IPv6 connection limit to /64 2025-08-23 22:21:27 -04:00