From 792c5cd28d922d65c30fd56bd1775e10a255fdd5 Mon Sep 17 00:00:00 2001 From: Someone Date: Fri, 13 Feb 2026 01:38:09 +0100 Subject: [PATCH] roles/base/network/files --- roles/base/network/files/default/nftables.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/base/network/files/default/nftables.conf b/roles/base/network/files/default/nftables.conf index 9b09a7d..9da233d 100644 --- a/roles/base/network/files/default/nftables.conf +++ b/roles/base/network/files/default/nftables.conf @@ -38,9 +38,9 @@ table inet filter { ct state new meta mark set 10 ct mark set meta mark # accept neighbour discovery otherwise IPv6 connectivity breaks. - ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-advert, nd-neighbor-solicit, nd-router-advert} counter accept + ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-advert, nd-neighbor-solicit, nd-router-advert, nd-router-solicit } counter accept ip6 nexthdr udp udp dport 546 counter accept - ip protocol icmp icmp type { echo-request} counter accept + ip protocol icmp icmp type { echo-request } counter accept # accept connections to these services. tcp dport 2 counter accept -- 2.47.3