From 43c4602ed4e858ef305e6f8dec021eb2cb13a51d Mon Sep 17 00:00:00 2001 From: Timo Makinen Date: Fri, 19 Mar 2021 18:22:19 +0000 Subject: [PATCH] iptables: Don't use ipv4 raw rules on ipv6 firewall --- roles/iptables/templates/ip6tables.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/iptables/templates/ip6tables.j2 b/roles/iptables/templates/ip6tables.j2 index 18ed493..ee937b2 100644 --- a/roles/iptables/templates/ip6tables.j2 +++ b/roles/iptables/templates/ip6tables.j2 @@ -5,7 +5,7 @@ -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p ipv6-icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -{% for rule in firewall_raw %} +{% for rule in firewall_raw6 %} {{ rule }} {% endfor %} {% for rule in firewall_in %}