From 67adb1075843ad55f13af4ae811bb7d47d86e9ae Mon Sep 17 00:00:00 2001
From: Edwin Lyon <53972157+practical-engelbart@users.noreply.github.com>
Date: Fri, 22 Jan 2021 03:51:10 -0800
Subject: [PATCH] Update rules6.conf

---
 iptables/rules6.conf | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/iptables/rules6.conf b/iptables/rules6.conf
index 12fa596..30a24a1 100644
--- a/iptables/rules6.conf
+++ b/iptables/rules6.conf
@@ -6,14 +6,13 @@
 :FILTERS - [0:0]
 -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
 -A INPUT -i lo -j ACCEPT
+-A INPUT -m conntrack --ctstate INVALID -j DROP
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 5/sec -j ACCEPT
 -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 5/sec -j ACCEPT
--A INPUT -m conntrack --ctstate INVALID -j DROP
 -A INPUT -j FILTERS
--A INPUT -j REJECT
 -A OUTPUT -o lo -j ACCEPT
 -A OUTPUT -o ens3 -j ACCEPT
 -A DOCKER-USER -i ens3 -j FILTERS