From 69bdac4aa62d70398cea3c9f55f71b5743780683 Mon Sep 17 00:00:00 2001 From: hygienic-books Date: Tue, 5 Jul 2022 04:45:41 +0200 Subject: [PATCH] docs(config): Warn user that a trailing target=DROP rule is sensible --- README.md | 6 ++++-- examples/config.ini.example | 2 ++ 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 062d614..1612009 100644 --- a/README.md +++ b/README.md @@ -89,9 +89,11 @@ We strongly recommend you do keep the very last example section: target = DROP addr = ports = -proto = +proto = +state = +do_ipv6 = true ``` -If a packet has traversed rules this far without being accepted it will be dropped. +If a packet has traversed rules this far without being accepted it will be dropped. Note that if any of your custom `[sections]` use `do_ipv6 = true` your final `DROP` rule should do the same. Otherwise you'll just get `DROP` rule in `iptables` but not in `ip6tables`. ## Options diff --git a/examples/config.ini.example b/examples/config.ini.example index 1d1a64b..57653fc 100644 --- a/examples/config.ini.example +++ b/examples/config.ini.example @@ -28,3 +28,5 @@ target = DROP addr = ports = proto = +state = +do_ipv6 = true