Drop IPv6 output traffic by default
This commit is contained in:
parent
1fceb5dfa7
commit
cb789d465f
@ -14,6 +14,9 @@ in {
|
|||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
enable = true;
|
enable = true;
|
||||||
extraCommands = ''
|
extraCommands = ''
|
||||||
|
ip6tables -F OUTPUT
|
||||||
|
ip6tables -P OUTPUT DROP
|
||||||
|
|
||||||
iptables -F OUTPUT
|
iptables -F OUTPUT
|
||||||
iptables -P OUTPUT DROP
|
iptables -P OUTPUT DROP
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user