Commits

Yuya Nishihara committed d6e465e

setup-iptables: no need to disable OUTPUT of ipv6

Comments (0)

Files changed (1)

scripts/setup-iptables.sh

 
 disallow_ipv6 () {
     ip6tables -P INPUT DROP
-    ip6tables -P OUTPUT DROP
+    ip6tables -P OUTPUT ACCEPT
     ip6tables -P FORWARD DROP
     ip6tables -A INPUT -i lo -j ACCEPT
 }