Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #265848
| From | Michel Verdier <mv524@free.fr> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: nftables firewall question: matching udp in ipv6 |
| Date | 2024-01-12 19:40 +0100 |
| Message-ID | <HVuBI-2Dmc-7@gated-at.bofh.it> (permalink) |
| References | <HVrNw-2BEZ-21@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 2024-01-12, Ralph Aichinger wrote: > If I insert the following rule at the bottom, everything starts to > work: > > meta l4proto udp accept Add log to see what would be dropped: meta l4proto udp log level info prefix "udp" accept Provide "nft list ruleset" to better see what nft understands. I suppose your udp is not "established" to not be accepted. Perhaps something in your nat that breaks "established" ?
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
nftables firewall question: matching udp in ipv6 Ralph Aichinger <ra@h5.or.at> - 2024-01-12 16:40 +0100
Re: nftables firewall question: matching udp in ipv6 Tom Furie <tom@furie.org.uk> - 2024-01-12 17:00 +0100
Re: nftables firewall question: matching udp in ipv6 Ralph Aichinger <ra@h5.or.at> - 2024-01-12 17:30 +0100
Re: nftables firewall question: matching udp in ipv6 Ralph Aichinger <ra@h5.or.at> - 2024-01-12 17:40 +0100
Re: nftables firewall question: matching udp in ipv6 Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-01-12 18:30 +0100
Re: nftables firewall question: matching udp in ipv6 Ralph Aichinger <ra@h5.or.at> - 2024-01-12 19:10 +0100
Re: nftables firewall question: matching udp in ipv6 Michel Verdier <mv524@free.fr> - 2024-01-12 19:40 +0100
Re: nftables firewall question: matching udp in ipv6 Ralph Aichinger <ra@h5.or.at> - 2024-01-12 21:20 +0100
Re: nftables firewall question: matching udp in ipv6 Michel Verdier <mv524@free.fr> - 2024-01-12 22:10 +0100
csiph-web