diff options
| author | smos <seth.mos@dds.nl> | 2012-04-02 12:58:29 +0200 |
|---|---|---|
| committer | smos <seth.mos@dds.nl> | 2012-04-02 12:58:29 +0200 |
| commit | dbcddabcdf7e4a64e5addfee27621d0c66c333d6 (patch) | |
| tree | 6c2710123ba2df8fe40ef0b3ca3da32371abcd1e | |
| parent | e53ffe8d44f95c237a6b5e7d8043ecf45654e5bd (diff) | |
| download | pfsense-dbcddabcdf7e4a64e5addfee27621d0c66c333d6.zip pfsense-dbcddabcdf7e4a64e5addfee27621d0c66c333d6.tar.gz | |
Adjust the DHCP6 client firewall rules
| -rw-r--r-- | etc/inc/filter.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index eb309d0..473fd64 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2491,7 +2491,8 @@ EOD; $ipfrules .= <<<EOD # allow our DHCPv6 client out to the {$oc['descr']} -pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client out {$oc['descr']}" +pass in on \${$oc['descr']} proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 label "allow dhcpv6 client in {$oc['descr']}" +pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client in {$oc['descr']}" pass out on \${$oc['descr']} proto udp from any port = 546 to any port = 547 label "allow dhcpv6 client out {$oc['descr']}" EOD; |
