diff --git a/roles/proxmox-backup/templates/nftables.conf.j2 b/roles/proxmox-backup/templates/nftables.conf.j2 index aff70a9..eed9e44 100644 --- a/roles/proxmox-backup/templates/nftables.conf.j2 +++ b/roles/proxmox-backup/templates/nftables.conf.j2 @@ -19,6 +19,10 @@ table inet filter { packet-too-big, parameter-problem, time-exceeded, } accept comment "accept some ICMPv6" + iif mgmt0 ip6 hoplimit 255 ip6 nexthdr icmpv6 icmpv6 type { + nd-neighbor-advert, nd-neighbor-solicit, nd-router-advert + } accept comment "accept IPv6 neighbor discovery" + # BGP / BFD sessions iif lan0 ip6 saddr fe80::/64 accept iif lan1 ip6 saddr fe80::/64 accept