Asep Haryana 7da1727603 fix(firewall): accept IPv6 MLD/ND multicast (ff02::1, ff02::2, ff02::fb) ...

Neighbor multicast to ff02::1 (MLDv2 reports from other hosts) was
hitting the LOG+DROP tail — ~1800 FW6-DROP lines/6h in journald,
i.e. ~5/min of pure log spam from ICMPv6 layer-2 discovery. Accept
link-local multicast ranges before the logging rule.

2026-08-03 04:06:32 +07:00

..

99-hardening.conf

feat(infra): hardening firewall + sysctl + ssh

2026-08-02 20:22:49 +07:00

99-ssh-optimization.conf

feat(infra): hardening firewall + sysctl + ssh

2026-08-02 20:22:49 +07:00

firewall.sh

fix(firewall): accept IPv6 MLD/ND multicast (ff02::1, ff02::2, ff02::fb)

2026-08-03 04:06:32 +07:00