Merge pull request #160037 from lourkeur/cleanup/firewall

This commit is contained in:
Martin Weinelt 2022-02-14 23:39:23 +01:00 committed by GitHub
commit b3d39e3c59
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -179,10 +179,6 @@ let
) cfg.allowedUDPPortRanges
) allInterfaces)}
# Accept IPv4 multicast. Not a big security risk since
# probably nobody is listening anyway.
#iptables -A nixos-fw -d 224.0.0.0/4 -j nixos-fw-accept
# Optionally respond to ICMPv4 pings.
${optionalString cfg.allowPing ''
iptables -w -A nixos-fw -p icmp --icmp-type echo-request ${optionalString (cfg.pingLimit != null)