summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorume <ume@FreeBSD.org>2004-05-24 07:27:26 +0000
committerume <ume@FreeBSD.org>2004-05-24 07:27:26 +0000
commit169bb92b156c723be343bc1a0912e85600c0c390 (patch)
tree842742e22bfab563ed2663010c4e99faf8d59a9e /etc
parent25ebfa5a90823db1401fda08ed867702c8ae818e (diff)
downloadFreeBSD-src-169bb92b156c723be343bc1a0912e85600c0c390.zip
FreeBSD-src-169bb92b156c723be343bc1a0912e85600c0c390.tar.gz
drop packet which has ::1 as src or dst via other than lo0
like as rc.firewall does. MFC after: 1 week
Diffstat (limited to 'etc')
-rw-r--r--etc/rc.firewall62
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/rc.firewall6 b/etc/rc.firewall6
index 97547f2..e4a345c 100644
--- a/etc/rc.firewall6
+++ b/etc/rc.firewall6
@@ -55,6 +55,8 @@ setup_local () {
# Only in rare cases do you want to change these rules
#
${fw6cmd} add 100 pass all from any to any via lo0
+ ${fw6cmd} add 200 deny all from any to ::1
+ ${fw6cmd} add 300 deny all from ::1 to any
#
# ND
#
OpenPOWER on IntegriCloud