summaryrefslogtreecommitdiffstats
path: root/etc/rc.firewall6
Commit message (Collapse)AuthorAgeFilesLines
* Bring rc.firewall{,6} more in line with the word and spirit ofcjc2002-02-211-13/+24
| | | | | | | | | | | | | | | | rc.conf(5) and the files' inline documentation. - Add the "closed"-type, documented in both places, but which did not exist in the code. - When provided a ruleset, the system should not make any assumptions about the sites's policy and should add no rules of its own. - Make the "UNKNOWN" (documented in-line) actual work as advertised, load no rules. Prodded by: Igor M Podlesny <poige@morning.ru> MFC after: 1 week
* Delete a needless rule for DAD. An unspecified address is never usedume2002-02-201-1/+0
| | | | | | | as a destination address of IPv6 packets. Submitted by: cjc MFC after: 1 week
* fix typo. icmptype of destination unreach is not 2 but 1.ume2001-08-211-1/+1
| | | | Submitted by: kuriyama
* pass any NS/NA/toobig.ume2001-07-241-19/+10
| | | | | Requested by: itojun MFC after: 5 days
* - Allow link-local multicast traffic for client.ume2001-07-211-3/+29
| | | | | | | - Allow ICMPv6 destination unreach, packet too big and NS/NA. - RIPng also uses link-local to link-local. MFC after: 1 week
* Correct typo. It should be site-local address prefix.ume2001-06-221-2/+2
| | | | | Submitted by: kuriyama MFC after: 3 days
* Fix typos in comment.kuriyama2001-06-221-2/+2
| | | | | | (s/IPFIREWALL_DEFAULT_TO_ACCEPT/IPV6FIREWALL_DEFAULT_TO_ACCEPT/) MFC after: 1 week
* With the recent change to ip6fw, it is safe to return to using ${fw6cmd}gshapiro2001-04-131-2/+1
| | | | which may include the -q flag.
* ip6fw doesn't support -q if reading from a file so don't use ${fw6cmd} whichgshapiro2001-02-281-1/+2
| | | | | | may have a -q if ${ipv6_firewall_quiet} is set. Reviewed by: kris
* Fix references to Chapman & Zwicky and Cheswick & Bellowin.des2001-02-251-3/+5
| | | | | PR: 24652 Submitted by: jjreynold@home.com
* - ipv6_prefix_* and ipv6_ifconfig_* work for end nodeume2000-10-291-0/+257
- rtsol should be work for only one interface - new variable ipv6_defaultrouter is added - option name of rtadvd in comment are corrected - ipv6_firewall_enable, ipv6_firewall_type, ipv6_firewall_script, ipv6_firewall_logging are added to introduce rc.firewall6. IPv6 firewall rule is just starting point and should be brushed up. This commit includes PR18621, PR21694, PR22051. PR: conf/18621, conf/21694, conf/22051 Reviewed by: asmodai
OpenPOWER on IntegriCloud