This commit is contained in:
Jamie Cameron
2017-02-18 14:14:10 -08:00
parent c1ebe147ac
commit f99d1d20e0

View File

@@ -108,33 +108,8 @@ if ($in{'auto'}) {
{ 'chain' => 'INPUT',
'm' => [ [ "", "icmpv6" ] ],
'p' => [ [ "", "icmpv6" ] ],
'icmpv6-type' => [ "", "echo-reply" ],
'j' => [ "", 'ACCEPT' ],
'cmt' => 'Accept responses to our pings' },
{ 'chain' => 'INPUT',
'm' => [ [ "", "icmpv6" ] ],
'p' => [ [ "", "icmpv6" ] ],
'icmpv6-type' => [ "", "destination-unreachable" ],
'j' => [ "", 'ACCEPT' ],
'cmt' => 'Accept notifications of unreachable hosts' },
{ 'chain' => 'INPUT',
'm' => [ [ "", "icmpv6" ] ],
'p' => [ [ "", "icmpv6" ] ],
'icmpv6-type' => [ "", "packet-too-big" ],
'j' => [ "", 'ACCEPT' ],
'cmt' => 'Accept notifications to reduce sending speed' },
{ 'chain' => 'INPUT',
'm' => [ [ "", "icmpv6" ] ],
'p' => [ [ "", "icmpv6" ] ],
'icmpv6-type' => [ "", "time-exceeded" ],
'j' => [ "", 'ACCEPT' ],
'cmt' => 'Accept notifications of lost packets' },
{ 'chain' => 'INPUT',
'm' => [ [ "", "icmpv6" ] ],
'p' => [ [ "", "icmpv6" ] ],
'icmpv6-type' => [ "", "parameter-problem" ],
'j' => [ "", 'ACCEPT' ],
'cmt' => 'Accept notifications of protocol problems' }
'cmt' => 'Accept all ICMPv6 traffic' },
);
if ($in{'auto'} >= 3) {
# Allow ssh and ident