[pkg-netfilter-team] Bug#1000407: nftables: Update icmpv6 workstation.nft documentation

[Matt Zagrabelny]

Package: nftables
Version: 1.0.1-1
Severity: normal

Greetings nftables maintainer(s),

I recently began to use nftables and followed some of the examples in
/u/s/d/nftables/examples/workstation.nft .

In particular, I was informed that the rule:

ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit,  nd-router-advert, nd-neighbor-advert } accept

can be written more succinctly by:

icmpv6 type { nd-neighbor-solicit,  nd-router-advert, nd-neighbor-advert } accept

The conversation can be found at:

https://marc.info/?l=netfilter&m=163731252412437&w=2

and references the link:

https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_headers#Matching_IPv6_headers

Thanks for your work for Debian and free software.

Cheers!


-- System Information:
Debian Release: bookworm/sid
  APT prefers oldoldstable
  APT policy: (500, 'oldoldstable'), (500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-3-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages nftables depends on:
ii  libc6         2.32-4
ii  libedit2      3.1-20210910-1
ii  libnftables1  1.0.1-1

Versions of packages nftables recommends:
ii  netbase  6.3

Versions of packages nftables suggests:
pn  firewalld  <none>

-- no debconf information