diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2014-02-18 20:31:47 -0300 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2014-02-18 20:31:47 -0300 |
| commit | 5a47e9b12e0561d5ee8ee67290fe3bc92d1f98a1 (patch) | |
| tree | e064656693b7d1ad7a3ecf2b3d93e67ff9c9e21f | |
| parent | d291634ad943abdb089250b307d788f30d1af91b (diff) | |
| download | pfsense-5a47e9b12e0561d5ee8ee67290fe3bc92d1f98a1.zip pfsense-5a47e9b12e0561d5ee8ee67290fe3bc92d1f98a1.tar.gz | |
Only add dhcpv6 client allow rules if ipv6allow is set
| -rw-r--r-- | etc/inc/filter.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index c473a32..82de74a 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2758,7 +2758,7 @@ block in $bogonlog quick on \${$oc['descr']} from <bogons> to any label "{$fix_r EOD; } - if($oc['type6'] == "slaac" || $oc['type6'] == "dhcp6") { + if(isset($config['system']['ipv6allow']) && ($oc['type6'] == "slaac" || $oc['type6'] == "dhcp6")) { $ipfrules .= <<<EOD # allow our DHCPv6 client out to the {$oc['descr']} pass in quick on \${$oc['descr']} proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 label "{$fix_rule_label("allow dhcpv6 client in {$oc['descr']}")}" |
