diff options
author | Seth Mos <seth.mos@dds.nl> | 2011-05-05 13:50:35 +0200 |
---|---|---|
committer | Seth Mos <seth.mos@dds.nl> | 2011-05-05 13:50:35 +0200 |
commit | e7230cb32e470f44dd3643047510b6ade18c2fc3 (patch) | |
tree | cef64202483410376481846fae367c7ae8ba78c9 | |
parent | c495f88b3c77c4eb8028c10c6acf8274a7b8aad1 (diff) | |
download | pfsense-e7230cb32e470f44dd3643047510b6ade18c2fc3.zip pfsense-e7230cb32e470f44dd3643047510b6ade18c2fc3.tar.gz |
Add firewall rules so that the DHCPv6 replies can come back in
-rw-r--r-- | etc/inc/filter.inc | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index 81dbd9a..2c8b19c 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -2301,6 +2301,9 @@ EOD; # allow our DHCP client out to the {$oc['descr']} pass in on \${$oc['descr']} proto udp from any port = 67 to any port = 68 label "allow dhcp client out {$oc['descr']}" pass out on \${$oc['descr']} proto udp from any port = 68 to any port = 67 label "allow dhcp client out {$oc['descr']}" +# allow our DHCPv6 client out to the {$oc['descr']} +pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client out {$oc['descr']}" +pass out on \${$oc['descr']} proto udp from any port = 546 to any port = 547 label "allow dhcpv6 client out {$oc['descr']}" # Not installing DHCP server firewall rules for {$oc['descr']} which is configured for DHCP. EOD; |