Browse Source

nftables: Ignore packets for UDP port 0

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 2 years ago
parent
commit
ea33ab41c8
1 changed files with 1 additions and 0 deletions
  1. 1 0
      nftables/nftables.conf.tmpl

+ 1 - 0
nftables/nftables.conf.tmpl

@@ -34,6 +34,7 @@ table ip filter {
 		type filter hook input priority 0; policy drop;
 		iifname "lo" counter accept
 		ip protocol icmp counter jump icmp_chain
+		udp dport 0 counter drop
 		tcp dport 7 counter drop comment "Ignore echo protocol queries"
 		ct state invalid counter drop
 		counter jump admin_access