Эх сурвалжийг харах

Fix ferm default config (ACCEPT all packets from lo with IPv6)

Emmanuel Bouthenot 10 жил өмнө
parent
commit
4e23e65cdd

+ 3 - 0
roles/common/templates/ferm/ferm.conf.j2

@@ -59,6 +59,9 @@ domain ip6 table filter {
         mod state state INVALID DROP;
         mod state state INVALID DROP;
         mod state state (ESTABLISHED RELATED) ACCEPT;
         mod state state (ESTABLISHED RELATED) ACCEPT;
 
 
+        # allow local packet
+        interface lo ACCEPT;
+
         # allow ICMP (for neighbor solicitation, like ARP for IPv4)
         # allow ICMP (for neighbor solicitation, like ARP for IPv4)
         proto ipv6-icmp ACCEPT;
         proto ipv6-icmp ACCEPT;