X-Git-Url: https://git.ao2.it/config/nftables.git/blobdiff_plain/4fda8eab6d828b61ca4753cb2bc0c232578ffb90..d684d1e527c3554ae88b01d215d3a07d7606cbad:/nftables-workstation.nft diff --git a/nftables-workstation.nft b/nftables-workstation.nft index 3f1f446..fd227f5 100644 --- a/nftables-workstation.nft +++ b/nftables-workstation.nft @@ -75,7 +75,8 @@ table inet filter { } ip6 hoplimit 255 accept # Allow multicast listener discovery on link-local addresses. - ip6 nexthdr ipv6-icmp icmpv6 type { + # RFC2710 specifies that a Hop-by-Hop Options header is used. + hbh nexthdr ipv6-icmp icmpv6 type { mld-listener-query, mld-listener-report, mld-listener-reduction