From 7045160072782c07f9d6d24d0aeae55d2babb41d Mon Sep 17 00:00:00 2001 From: ume Date: Fri, 22 Jun 2001 13:49:15 +0000 Subject: Correct typo. It should be site-local address prefix. Submitted by: kuriyama MFC after: 3 days --- etc/rc.firewall6 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'etc') diff --git a/etc/rc.firewall6 b/etc/rc.firewall6 index 48803c0..ad26c1b 100644 --- a/etc/rc.firewall6 +++ b/etc/rc.firewall6 @@ -170,8 +170,8 @@ case ${ipv6_firewall_type} in ${fw6cmd} add deny all from ${onet}/${oprefixlen} to any in via ${iif} # Stop site-local on the outside interface - ${fw6cmd} add deny all from ff02::/16 to any via ${oif} - ${fw6cmd} add deny all from any to ff02::/16 via ${oif} + ${fw6cmd} add deny all from fec0::/10 to any via ${oif} + ${fw6cmd} add deny all from any to fec0::/10 via ${oif} # Disallow "internal" addresses to appear on the wire. ${fw6cmd} add deny all from ::ffff:0.0.0.0/96 to any via ${oif} -- cgit v1.1