Enable echo-request in nftables on Debian 10.

fixes #103
iredmail · Dec 28, 2020 · 8fb072a · 8fb072a
1 parent ef08825
commit 8fb072a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/samples/firewall/nftables.conf b/samples/firewall/nftables.conf
@@ -18,8 +18,8 @@ table inet filter {
         ct state established,related accept
 
         # accept ICMP & IGMP
-        ip6 nexthdr icmpv6 icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, mld-listener-query, mld-listener-report, mld-listener-reduction, nd-router-solicit, nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert, ind-neighbor-solicit, ind-neighbor-advert, mld2-listener-report } accept
-        ip protocol icmp icmp type { destination-unreachable, router-solicitation, router-advertisement, time-exceeded, parameter-problem } accept
+        ip6 nexthdr icmpv6 icmpv6 type { echo-request, destination-unreachable, packet-too-big, time-exceeded, parameter-problem, mld-listener-query, mld-listener-report, mld-listener-reduction, nd-router-solicit, nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert, ind-neighbor-solicit, ind-neighbor-advert, mld2-listener-report } accept
+        ip protocol icmp icmp type { echo-request, destination-unreachable, router-solicitation, router-advertisement, time-exceeded, parameter-problem } accept
         ip protocol igmp accept
 
         # ssh