diff options
| -rw-r--r-- | etc/rc.firewall6 | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/rc.firewall6 b/etc/rc.firewall6 index 289b7dc..c14a09a 100644 --- a/etc/rc.firewall6 +++ b/etc/rc.firewall6 @@ -188,6 +188,10 @@ case ${ipv6_firewall_type} in ${fw6cmd} add deny all from ${inet}/${iprefixlen} to any in via ${oif} ${fw6cmd} add deny all from ${onet}/${oprefixlen} to any in via ${iif} + # Stop unique local unicast address on the outside interface + ${fw6cmd} add deny all from fc00::/7 to any via ${oif} + ${fw6cmd} add deny all from any to fc00::/7 via ${oif} + # Stop site-local on the outside interface ${fw6cmd} add deny all from fec0::/10 to any via ${oif} ${fw6cmd} add deny all from any to fec0::/10 via ${oif} |
