liminix

commit ae9fc75e75ec1b768564241b3d810fb6df86d957
parent bf772f2ae16d9717690a7b688cdb53373e253b3c
Author: Daniel Barlow <dan@telent.net>
Date:   Sat, 31 Oct 2026 19:09:46 +0000

firewall default rules:  accept ipv6 loopback packets

Diffstat:
M
modules/firewall/default-rules.nix
 | 
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/modules/firewall/default-rules.nix b/modules/firewall/default-rules.nix
@@ -136,6 +136,7 @@ in
     hook = "input";
     rules = [
       (accept "meta l4proto icmpv6")
+      "iifname lo accept"
       "iifname @lan jump input-ip6-lan"
       "iifname @wan jump input-ip6-wan"
       (if allow-incoming then accept "iifname @wan" else "iifname @wan jump incoming-allowed-ip6")