Am 24.01.20 um 22:29 schrieb kfm@xxxxxxxxxxxxx:
> On 24/01/2020 21:16, Robert Sander wrote:
>> Hi,
>>
>> how do I specify a rule to match all ICMP packages?
>>
>> nft add rule ip filter input icmp accept
>>
>> does not work.
>
> nft add rule ip filter input meta l4proto icmp accept
>
So it's basically like
iptables -p icmp -m icmp --icmp-type xyz
^ ^
| +- icmp type xyz
+- meta l4proto icmp
Thanks.
--
Robert Sander
Heinlein Support GmbH
Linux: Akademie - Support - Hosting
http://www.heinlein-support.de
Tel: 030-405051-43
Fax: 030-405051-19
Zwangsangaben lt. §35a GmbHG:
HRB 93818 B / Amtsgericht Berlin-Charlottenburg,
Geschäftsführer: Peer Heinlein -- Sitz: Berlin
Attachment:
signature.asc
Description: OpenPGP digital signature
