diff options
| author | makefu <github@syntax-fehler.de> | 2016-11-27 15:24:22 +0100 |
|---|---|---|
| committer | makefu <github@syntax-fehler.de> | 2016-11-27 15:24:22 +0100 |
| commit | b94fc3265b92f70ecb4507484e378e8f8084477c (patch) | |
| tree | e9acdb99cafdd1362bb98a8f00139dde6edef6a4 /lass/2configs/default.nix | |
| parent | bcc2b327c4dbd34162db8cf81fbbc7688feafd9a (diff) | |
| parent | da3022389d1da7ac9c2ca42eb2d16582b96e0074 (diff) | |
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'lass/2configs/default.nix')
| -rw-r--r-- | lass/2configs/default.nix | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix index a7d2a6cef..21a2ec038 100644 --- a/lass/2configs/default.nix +++ b/lass/2configs/default.nix @@ -194,7 +194,9 @@ with import <stockholm/lib>; { predicate = "-p icmp"; target = "ACCEPT"; precedence = 10000; } { predicate = "-i lo"; target = "ACCEPT"; precedence = 9999; } { predicate = "-p tcp --dport 22"; target = "ACCEPT"; precedence = 9998; } - { predicate = "-i retiolum"; target = "REJECT"; precedence = -10000; } + { predicate = "-p tcp -i retiolum"; target = "REJECT --reject-with tcp-reset"; precedence = -10000; } + { predicate = "-p udp -i retiolum"; target = "REJECT --reject-with icmp-port-unreachable"; v6 = false; precedence = -10000; } + { predicate = "-i retiolum"; target = "REJECT --reject-with icmp-proto-unreachable"; v6 = false; precedence = -10000; } ]; }; }; |