Skip to content

Commit 3285e2f

Browse files
authored
systemvm: accept ipv6 established/related return traffic (#13173)
1 parent 4a49ffa commit 3285e2f

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

systemvm/debian/opt/cloud/bin/cs/CsNetfilter.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -232,7 +232,7 @@ def add_ip6_chain(self, address_family, table, chain, hook, action):
232232
if hook == "input" or hook == "output":
233233
CsHelper.execute("nft add rule %s %s %s icmpv6 type { echo-request, echo-reply, \
234234
nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept" % (address_family, table, chain))
235-
elif hook == "forward":
235+
if hook == "input" or hook == "forward":
236236
CsHelper.execute("nft add rule %s %s %s ct state established,related accept" % (address_family, table, chain))
237237

238238
def add_ip4_chain(self, address_family, table, chain, hook, action):

0 commit comments

Comments
 (0)