Drop IPv6 output traffic by default

2019-12-26 17:42:58 +00:00
parent 1fceb5dfa7
commit cb789d465f
1 changed files with 3 additions and 0 deletions
--- a/networking.nix
+++ b/networking.nix
@@ -14,6 +14,9 @@ in {
  networking.firewall = {
    enable = true;
    extraCommands = ''
+      ip6tables -F OUTPUT
+      ip6tables -P OUTPUT DROP
+
      iptables -F OUTPUT
      iptables -P OUTPUT DROP