1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
|
iptables-translate -t filter -A INPUT -m icmp --icmp-type echo-reply -j ACCEPT
nft 'add rule ip filter INPUT icmp type echo-reply counter accept'
iptables-translate -t filter -A INPUT -m icmp --icmp-type 3 -j ACCEPT
nft 'add rule ip filter INPUT icmp type destination-unreachable counter accept'
iptables-translate -t filter -A INPUT -m icmp ! --icmp-type 3 -j ACCEPT
nft 'add rule ip filter INPUT icmp type != destination-unreachable counter accept'
iptables-translate -t filter -A INPUT -m icmp --icmp-type any -j ACCEPT
nft 'add rule ip filter INPUT ip protocol icmp counter accept'
iptables-translate -t filter -A INPUT -m icmp --icmp-type info-request -j ACCEPT
nft 'add rule ip filter INPUT icmp type info-request counter accept'
iptables-translate -t filter -A INPUT -m icmp --icmp-type 16 -j ACCEPT
nft 'add rule ip filter INPUT icmp type info-reply counter accept'
|