bw/bundles/nftables: improve handling for icmp

voc · Sep 23, 2024 · 9d291d5 · 9d291d5
1 parent f430bb1
commit 9d291d5
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/bundlewrap/bundles/nftables/files/nftables.conf b/bundlewrap/bundles/nftables/files/nftables.conf
@@ -16,9 +16,8 @@ table inet filter {
 
         icmp type timestamp-request drop
         icmp type timestamp-reply drop
-        ip protocol icmp accept
+        meta l4proto {icmp, ipv6-icmp} accept
 
-        ip6 nexthdr ipv6-icmp accept
 % for ruleset, rules in sorted(input.items()):
 
         # ${ruleset}