Re: [pve-devel] [PATCH proxmox-firewall 1/1] firewall: properly reject ipv6 traffic

2024-05-13 Thread Stefan Hanreich
v2 available: https://lists.proxmox.com/pipermail/pve-devel/2024-May/063839.html On 5/13/24 13:35, Stefan Hanreich wrote: > ICMPv6 has different message types for rejecting traffic. With ICMP we > used host-prohibited as rejection type, which doesn't exist in ICMPv6. > Add an additional rule for

[pve-devel] [PATCH proxmox-firewall 1/1] firewall: properly reject ipv6 traffic

2024-05-13 Thread Stefan Hanreich
ICMPv6 has different message types for rejecting traffic. With ICMP we used host-prohibited as rejection type, which doesn't exist in ICMPv6. Add an additional rule for IPv6, so it uses admin-prohibited. Signed-off-by: Stefan Hanreich --- proxmox-firewall/resources/proxmox-firewall.nft | 6 -