vidhar: nftables...

1 files changed, 4 insertions, 2 deletions

diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft
index f4e2aa94..f5de1bd1 100644
--- a/hosts/vidhar/ruleset.nft
+++ b/hosts/vidhar/ruleset.nft
@@ -72,13 +72,15 @@ table inet filter {
 
   chain output {
     type filter hook output priority filter
-    policy drop
+    policy accept
+
 
+    oifname lo counter accept
 
     oifname != dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_local counter accept
     oifname dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_dsl counter accept
+    meta l4proto { ipv6-icmp, icmp, igmp } counter drop
 
-    meta l4proto != { ipv6-icmp, icmp, igmp } counter drop
 
     counter
   }