diff options
author | Renato Botelho <garga@FreeBSD.org> | 2014-02-18 20:31:47 -0300 |
---|---|---|
committer | Renato Botelho <garga@FreeBSD.org> | 2014-02-18 20:31:59 -0300 |
commit | 56e3ea85c1e1006024fcf66ac084195cf10cf144 (patch) | |
tree | ad1d880760883969e9c609bc969c9b4f6c57eee6 | |
parent | b74bf6859b149c21c990d19cd30acb3d61b50bca (diff) | |
download | pfsense-56e3ea85c1e1006024fcf66ac084195cf10cf144.zip pfsense-56e3ea85c1e1006024fcf66ac084195cf10cf144.tar.gz |
Only add dhcpv6 client allow rules if ipv6allow is set
-rw-r--r-- | etc/inc/filter.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index a5d8135..287fa3a 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2671,7 +2671,7 @@ block in $bogonlog quick on \${$oc['descr']} from <bogons> to any label "{$fix_r EOD; } - if($oc['type6'] == "slaac" || $oc['type6'] == "dhcp6") { + if(isset($config['system']['ipv6allow']) && ($oc['type6'] == "slaac" || $oc['type6'] == "dhcp6")) { $ipfrules .= <<<EOD # allow our DHCPv6 client out to the {$oc['descr']} pass in quick on \${$oc['descr']} proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 label "{$fix_rule_label("allow dhcpv6 client in {$oc['descr']}")}" |