aboutsummaryrefslogtreecommitdiffstats
path: root/package/firewall
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2011-11-09 11:10:37 +0000
committerJo-Philipp Wich <jow@openwrt.org>2011-11-09 11:10:37 +0000
commit3f4137d170e4b223fb42c49465f7429f29a56891 (patch)
treec721e64b9077fc258d7459869a0a33c437a986ba /package/firewall
parent1b025024d48d07294e975299ee8dbdc751e72121 (diff)
downloadupstream-3f4137d170e4b223fb42c49465f7429f29a56891.tar.gz
upstream-3f4137d170e4b223fb42c49465f7429f29a56891.tar.bz2
upstream-3f4137d170e4b223fb42c49465f7429f29a56891.zip
[package] firewall: add DHCPv6 default rule (#10381)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@28874 3c298f89-4303-0410-b956-a3cf2f4a3e73
Diffstat (limited to 'package/firewall')
-rw-r--r--package/firewall/Makefile2
-rw-r--r--package/firewall/files/firewall.config12
2 files changed, 13 insertions, 1 deletions
diff --git a/package/firewall/Makefile b/package/firewall/Makefile
index f95f73b4ad..6106348156 100644
--- a/package/firewall/Makefile
+++ b/package/firewall/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=firewall
PKG_VERSION:=2
-PKG_RELEASE:=41
+PKG_RELEASE:=42
include $(INCLUDE_DIR)/package.mk
diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
index 5a5dfd0186..4ba165fcc6 100644
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -43,6 +43,18 @@ config rule
option family ipv4
option target ACCEPT
+# Allow DHCPv6 replies
+# see https://dev.openwrt.org/ticket/10381
+config rule
+ option src wan
+ option proto udp
+ option src_ip fe80::/10
+ option src_port 547
+ option dest_ip fe80::/10
+ option dest_port 546
+ option family ipv6
+ option target ACCEPT
+
# Allow essential incoming IPv6 ICMP traffic
config rule
option src wan