aboutsummaryrefslogtreecommitdiffstats
path: root/package/network/config/firewall
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2015-09-25 08:41:12 +0000
committerJo-Philipp Wich <jow@openwrt.org>2015-09-25 08:41:12 +0000
commitf30ccc899143f8752096c8797add417cd56e6559 (patch)
treed2a8bfad05749487e513e3b9c6ccd96ec55e5914 /package/network/config/firewall
parent792f31bd10037724a63eb958c799418dc26a968c (diff)
downloadupstream-f30ccc899143f8752096c8797add417cd56e6559.tar.gz
upstream-f30ccc899143f8752096c8797add417cd56e6559.tar.bz2
upstream-f30ccc899143f8752096c8797add417cd56e6559.zip
firewall: allow DHCPv6 traffic to/from fc00::/6 instead of fe80::/10
There is no RFC requirement that DHCPv6 servers must reply with a link local address and some ISP servers in the wild appear to using addresses in the ULA range to send DHCPv6 offers. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 47048
Diffstat (limited to 'package/network/config/firewall')
-rw-r--r--package/network/config/firewall/files/firewall.config4
1 files changed, 2 insertions, 2 deletions
diff --git a/package/network/config/firewall/files/firewall.config b/package/network/config/firewall/files/firewall.config
index ba7e4ec0b3..749dbecb97 100644
--- a/package/network/config/firewall/files/firewall.config
+++ b/package/network/config/firewall/files/firewall.config
@@ -59,8 +59,8 @@ config rule
option name Allow-DHCPv6
option src wan
option proto udp
- option src_ip fe80::/10
- option dest_ip fe80::/10
+ option src_ip fc00::/6
+ option dest_ip fc00::/6
option dest_port 546
option family ipv6
option target ACCEPT