diff options
| -rw-r--r-- | etc/rc.firewall6 | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/etc/rc.firewall6 b/etc/rc.firewall6 index 48803c0..ad26c1b 100644 --- a/etc/rc.firewall6 +++ b/etc/rc.firewall6 @@ -170,8 +170,8 @@ case ${ipv6_firewall_type} in ${fw6cmd} add deny all from ${onet}/${oprefixlen} to any in via ${iif} # Stop site-local on the outside interface - ${fw6cmd} add deny all from ff02::/16 to any via ${oif} - ${fw6cmd} add deny all from any to ff02::/16 via ${oif} + ${fw6cmd} add deny all from fec0::/10 to any via ${oif} + ${fw6cmd} add deny all from any to fec0::/10 via ${oif} # Disallow "internal" addresses to appear on the wire. ${fw6cmd} add deny all from ::ffff:0.0.0.0/96 to any via ${oif} |
