Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fw: support for icmpv6 nftables in system rules #689

Merged
merged 1 commit into from
Jul 2, 2022
Merged

fw: support for icmpv6 nftables in system rules #689

merged 1 commit into from
Jul 2, 2022

Conversation

nberlee
Copy link
Contributor

@nberlee nberlee commented Jul 2, 2022

  • Add support for all available nftables ICMPv6 types (ip6tables -m icmpv6 --help)
  • Build nftables ICMPv6 rules
  • Create a default outbound ICMPv6 echo-request/reply rule
    (currently outbound echo-request ICMPv6 is by default denied)
$ doas nft list table inet mangle
table inet mangle {
	chain output {
		type filter hook output priority mangle; policy accept;
		icmp type { echo-reply, echo-request } accept
		icmpv6 type { echo-request, echo-reply } accept
		ct state related,new queue flags bypass to 0
	}
[...]

@nberlee
fw: support for icmpv6 nftables in system rules
5721ca9 
- Add support for all available nftables ICMPv6 types (ip6tables -m icmpv6 --help)
- Build nftables ICMPv6 rules
- Create a default outbound ICMPv6 echo-request/reply rule
  (currently outbound echo-request ICMPv6 is by default denied)

Signed-off-by: Nico Berlee <nico.berlee@on2it.net>
@gustavo-iniguez-goya gustavo-iniguez-goya merged commit 7347afd into evilsocket:master Jul 2, 2022
@gustavo-iniguez-goya
Copy link
Collaborator

❤️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@nberlee @gustavo-iniguez-goya