summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorThomas Lange <code@nerdmind.de>2016-01-30 15:19:14 +0100
committerThomas Lange <code@nerdmind.de>2016-01-30 15:19:14 +0100
commita477f549fa8c1d3a0f53f1b24b58de68809ab48c (patch)
tree8a8bea563d2af2153d3ce3211a8a74c7018c60e7
parent3829b044bce6989385583180f0477d1014972dee (diff)
downloadsnippets-a477f549fa8c1d3a0f53f1b24b58de68809ab48c.tar.gz
snippets-a477f549fa8c1d3a0f53f1b24b58de68809ab48c.tar.xz
snippets-a477f549fa8c1d3a0f53f1b24b58de68809ab48c.zip
Additional rule for ICMPv6 added
-rwxr-xr-xBash/iptables-whiteblacklisting.sh5
1 files changed, 3 insertions, 2 deletions
diff --git a/Bash/iptables-whiteblacklisting.sh b/Bash/iptables-whiteblacklisting.sh
index b383f5b..a34757d 100755
--- a/Bash/iptables-whiteblacklisting.sh
+++ b/Bash/iptables-whiteblacklisting.sh
@@ -64,9 +64,10 @@ IPTABLES --policy INPUT ACCEPT
IPTABLES --flush INPUT
#===============================================================================
-# Ping requests over ICMP protocol are always accepted
+# Ping requests over ICMP and ICMPv6 protocol are always accepted
#===============================================================================
-IPTABLES --append INPUT --protocol icmp --jump ACCEPT
+${IPTABLES_V4} --append INPUT --protocol icmp --jump ACCEPT
+${IPTABLES_V6} --append INPUT --protocol icmpv6 --jump ACCEPT
#===============================================================================
# Local loopback connections are also always accepted