summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorume <ume@FreeBSD.org>2010-01-09 19:16:27 +0000
committerume <ume@FreeBSD.org>2010-01-09 19:16:27 +0000
commit832ae2737b81b1188a180c5cbd4d73b07eb903ac (patch)
tree1eeacfc978dd51c7c4355a30955c55d763852b3f
parentc06b0ac5c7a7dd7c52ed3bf3b656030e0ec3dd6f (diff)
downloadFreeBSD-src-832ae2737b81b1188a180c5cbd4d73b07eb903ac.zip
FreeBSD-src-832ae2737b81b1188a180c5cbd4d73b07eb903ac.tar.gz
The client type rule allows DHCP, implicitly. Since DHCPv6 uses
link-local address unlike with DHCP, we need one more rule to allow the DHCPv6. Reported by: David Horn <dhorn2000__at__gmail.com>
-rw-r--r--etc/rc.firewall2
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/rc.firewall b/etc/rc.firewall
index 9d29f29..7e1d193 100644
--- a/etc/rc.firewall
+++ b/etc/rc.firewall
@@ -220,6 +220,8 @@ case ${firewall_type} in
# Allow any link-local multicast traffic
${fwcmd} add pass all from fe80::/10 to ff02::/16
${fwcmd} add pass all from ${net6} to ff02::/16
+ # Allow DHCPv6
+ ${fwcmd} add pass udp from fe80::/10 to me6 546
fi
# Allow TCP through if setup succeeded
OpenPOWER on IntegriCloud