diff options
author | Seth Mos <seth.mos@dds.nl> | 2011-05-06 13:08:04 +0000 |
---|---|---|
committer | Seth Mos <seth.mos@dds.nl> | 2011-05-06 13:08:04 +0000 |
commit | 000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5 (patch) | |
tree | 75e55378c58485dbb5aefa709eda54ca1286f3fb /conf.default/config.xml | |
parent | ed3956405edee6a8cde1dca85b92d7b5154573ff (diff) | |
download | pfsense-000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5.zip pfsense-000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5.tar.gz |
Add the ipv6 allow tag to the default config.
Add a default allow rule for the LAN with IPv6
Add a dhcp-pd sla-id of 0 for the WAN.
Add a dhcp-pd length of 0 for the WAN
Diffstat (limited to 'conf.default/config.xml')
-rw-r--r-- | conf.default/config.xml | 22 |
1 files changed, 21 insertions, 1 deletions
diff --git a/conf.default/config.xml b/conf.default/config.xml index b291c38..77accc5 100644 --- a/conf.default/config.xml +++ b/conf.default/config.xml @@ -1,7 +1,7 @@ <?xml version="1.0"?> <!-- pfSense default system configuration --> <pfsense> - <version>7.8</version> + <version>7.9</version> <lastchange></lastchange> <theme>pfsense_ng</theme> <sysctl> @@ -187,6 +187,7 @@ <!-- <harddiskstandby></harddiskstandby> --> <disablesegmentationoffloading/> <disablelargereceiveoffloading/> + <ipv6allow/> </system> <interfaces> <wan> @@ -202,6 +203,8 @@ <dhcphostname></dhcphostname> <media></media> <mediaopt></mediaopt> + <dhcp6-duid></dhcp6-duid> + <dhcp6-ia-pd-len>0</dhcp6-ia-pd-len> <!-- <wireless> *see below (opt[n])* @@ -213,8 +216,11 @@ <if>vr0</if> <ipaddr>192.168.1.1</ipaddr> <subnet>24</subnet> + <ipaddrv6>fe80::192:168:1:1</ipaddrv6> + <subnetv6>64</subnetv6> <media></media> <mediaopt></mediaopt> + <dhcp6-pd-sla-id>0</dhcp6-pd-sla-id> <!-- <wireless> *see below (opt[n])* @@ -422,6 +428,7 @@ <!-- <tcpidletimeout></tcpidletimeout> --> <rule> <type>pass</type> + <ipprotocol>inet</ipprotocol> <descr><![CDATA[Default allow LAN to any rule]]></descr> <interface>lan</interface> <source> @@ -431,11 +438,24 @@ <any/> </destination> </rule> + <rule> + <type>pass</type> + <ipprotocol>inet6</ipprotocol> + <descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr> + <interface>lan</interface> + <source> + <network>lan</network> + </source> + <destination> + <any/> + </destination> + </rule> <!-- rule syntax: <rule> <disabled/> <id>[0-9]*</id> <type>pass|block|reject</type> + <ipprotocol>inet|inet6</ipprotocol> <descr>...</descr> <interface>lan|opt[n]|wan|pptp</interface> <protocol>tcp|udp|tcp/udp|...</protocol> |