summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSeth Mos <seth.mos@dds.nl>2011-05-05 13:50:35 +0200
committerSeth Mos <seth.mos@dds.nl>2011-05-05 13:50:35 +0200
commite7230cb32e470f44dd3643047510b6ade18c2fc3 (patch)
treecef64202483410376481846fae367c7ae8ba78c9
parentc495f88b3c77c4eb8028c10c6acf8274a7b8aad1 (diff)
downloadpfsense-e7230cb32e470f44dd3643047510b6ade18c2fc3.zip
pfsense-e7230cb32e470f44dd3643047510b6ade18c2fc3.tar.gz
Add firewall rules so that the DHCPv6 replies can come back in
-rw-r--r--etc/inc/filter.inc3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 81dbd9a..2c8b19c 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2301,6 +2301,9 @@ EOD;
# allow our DHCP client out to the {$oc['descr']}
pass in on \${$oc['descr']} proto udp from any port = 67 to any port = 68 label "allow dhcp client out {$oc['descr']}"
pass out on \${$oc['descr']} proto udp from any port = 68 to any port = 67 label "allow dhcp client out {$oc['descr']}"
+# allow our DHCPv6 client out to the {$oc['descr']}
+pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client out {$oc['descr']}"
+pass out on \${$oc['descr']} proto udp from any port = 546 to any port = 547 label "allow dhcpv6 client out {$oc['descr']}"
# Not installing DHCP server firewall rules for {$oc['descr']} which is configured for DHCP.
EOD;
OpenPOWER on IntegriCloud