Comment on nftables: Can't ping my own server
farcaller@fstab.sh 1 week agoIt is accepted just fine then. You might want to check the reverse, start in top of the output chain and trace the echo reply.
Comment on nftables: Can't ping my own server
farcaller@fstab.sh 1 week agoIt is accepted just fine then. You might want to check the reverse, start in top of the output chain and trace the echo reply.
confusedpuppy@lemmy.dbzer0.com 1 week ago
How would trace the echo reply in the output chain? I tried adding
meta nftrace set 1directly to the ICMPv4 rule as well as making achain postroutingrule but I can’t seem to figure it out.farcaller@fstab.sh 1 week ago
I actually don’t remember off the top of my head, huh. The output chain is not the one I use often. I’d think
nft add rule tracing filter output ip protocol icmp icmp type echo-reply meta nftrace set 1would do it. Just make sure the priority is low enough again.