diff --git a/utils.py b/utils.py index 33c45b0..779cbd1 100644 --- a/utils.py +++ b/utils.py @@ -29,6 +29,7 @@ table inet filter { # activate the following line to accept common local services tcp dport { %s } ct state new accept + udp dport { 10767 } ct state new accept # ICMPv6 packets which must not be dropped, see https://tools.ietf.org/html/rfc4890#section-4.4.1 meta nfproto ipv6 icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, echo-reply, echo-request, nd-router-solicit, nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert, 148, 149 } accept