summaryrefslogtreecommitdiff
path: root/package/firewall/files/firewall.config
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2011-11-09 11:10:37 +0000
committerJo-Philipp Wich <jow@openwrt.org>2011-11-09 11:10:37 +0000
commit10f199d832eeae9768b327fd227c88de108106cf (patch)
tree8478c62fd7777f3d73b4cfcd421d1bff76b9c4e1 /package/firewall/files/firewall.config
parentf371d516bfc14dff62d9dc6b26a5ed0836592d60 (diff)
downloadmtk-20170518-10f199d832eeae9768b327fd227c88de108106cf.zip
mtk-20170518-10f199d832eeae9768b327fd227c88de108106cf.tar.gz
mtk-20170518-10f199d832eeae9768b327fd227c88de108106cf.tar.bz2
firewall: add DHCPv6 default rule (#10381)
SVN-Revision: 28874
Diffstat (limited to 'package/firewall/files/firewall.config')
-rw-r--r--package/firewall/files/firewall.config12
1 files changed, 12 insertions, 0 deletions
diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
index 5a5dfd0..4ba165f 100644
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -43,6 +43,18 @@ config rule
option family ipv4
option target ACCEPT
+# Allow DHCPv6 replies
+# see https://dev.openwrt.org/ticket/10381
+config rule
+ option src wan
+ option proto udp
+ option src_ip fe80::/10
+ option src_port 547
+ option dest_ip fe80::/10
+ option dest_port 546
+ option family ipv6
+ option target ACCEPT
+
# Allow essential incoming IPv6 ICMP traffic
config rule
option src wan