diff options
| author | Peter Simons <simons@cryp.to> | 2016-03-17 19:38:02 +0100 |
|---|---|---|
| committer | Peter Simons <simons@cryp.to> | 2016-03-17 19:40:13 +0100 |
| commit | a0ab4587b7760c073ec9501775b9116fb0b1c70c (patch) | |
| tree | 2d285880fb9c2559d27ff67bbe6f15ccaee89b7c /nixos | |
| parent | 5af4afb36b713dda1502d2f9348dcafedebff99b (diff) | |
Set networking.firewall.allowPing = true by default.
This patch fixes https://github.com/NixOS/nixpkgs/issues/12927. It would be great to configure good rate-limiting defaults for this via /proc/sys/net/ipv4/icmp_ratelimit and /proc/sys/net/ipv6/icmp/ratelimit, too, but I didn't since I don't know what a "good default" would be.
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/modules/services/networking/firewall.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/firewall.nix b/nixos/modules/services/networking/firewall.nix index e11fe072be651..9221fe155777d 100644 --- a/nixos/modules/services/networking/firewall.nix +++ b/nixos/modules/services/networking/firewall.nix @@ -338,7 +338,7 @@ in }; networking.firewall.allowPing = mkOption { - default = false; + default = true; type = types.bool; description = '' |