fix previous NEWS commit, oops

[ferm.git] / test / protocols / icmp.ferm

chain INPUT {
    proto icmp ACCEPT;
    proto icmp {
        icmp-type destination-unreachable ACCEPT;
        icmp-type ! redirect ACCEPT;
        icmp-type (router-advertisement ttl-zero-during-reassembly) ACCEPT;
    }
}