summaryrefslogtreecommitdiffstats
path: root/conf.default
diff options
context:
space:
mode:
authorSeth Mos <seth.mos@dds.nl>2011-05-06 13:08:04 +0000
committerSeth Mos <seth.mos@dds.nl>2011-05-06 13:08:04 +0000
commit000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5 (patch)
tree75e55378c58485dbb5aefa709eda54ca1286f3fb /conf.default
parented3956405edee6a8cde1dca85b92d7b5154573ff (diff)
downloadpfsense-000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5.zip
pfsense-000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5.tar.gz
Add the ipv6 allow tag to the default config.
Add a default allow rule for the LAN with IPv6 Add a dhcp-pd sla-id of 0 for the WAN. Add a dhcp-pd length of 0 for the WAN
Diffstat (limited to 'conf.default')
-rw-r--r--conf.default/config.xml22
1 files changed, 21 insertions, 1 deletions
diff --git a/conf.default/config.xml b/conf.default/config.xml
index b291c38..77accc5 100644
--- a/conf.default/config.xml
+++ b/conf.default/config.xml
@@ -1,7 +1,7 @@
<?xml version="1.0"?>
<!-- pfSense default system configuration -->
<pfsense>
- <version>7.8</version>
+ <version>7.9</version>
<lastchange></lastchange>
<theme>pfsense_ng</theme>
<sysctl>
@@ -187,6 +187,7 @@
<!-- <harddiskstandby></harddiskstandby> -->
<disablesegmentationoffloading/>
<disablelargereceiveoffloading/>
+ <ipv6allow/>
</system>
<interfaces>
<wan>
@@ -202,6 +203,8 @@
<dhcphostname></dhcphostname>
<media></media>
<mediaopt></mediaopt>
+ <dhcp6-duid></dhcp6-duid>
+ <dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
<!--
<wireless>
*see below (opt[n])*
@@ -213,8 +216,11 @@
<if>vr0</if>
<ipaddr>192.168.1.1</ipaddr>
<subnet>24</subnet>
+ <ipaddrv6>fe80::192:168:1:1</ipaddrv6>
+ <subnetv6>64</subnetv6>
<media></media>
<mediaopt></mediaopt>
+ <dhcp6-pd-sla-id>0</dhcp6-pd-sla-id>
<!--
<wireless>
*see below (opt[n])*
@@ -422,6 +428,7 @@
<!-- <tcpidletimeout></tcpidletimeout> -->
<rule>
<type>pass</type>
+ <ipprotocol>inet</ipprotocol>
<descr><![CDATA[Default allow LAN to any rule]]></descr>
<interface>lan</interface>
<source>
@@ -431,11 +438,24 @@
<any/>
</destination>
</rule>
+ <rule>
+ <type>pass</type>
+ <ipprotocol>inet6</ipprotocol>
+ <descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
+ <interface>lan</interface>
+ <source>
+ <network>lan</network>
+ </source>
+ <destination>
+ <any/>
+ </destination>
+ </rule>
<!-- rule syntax:
<rule>
<disabled/>
<id>[0-9]*</id>
<type>pass|block|reject</type>
+ <ipprotocol>inet|inet6</ipprotocol>
<descr>...</descr>
<interface>lan|opt[n]|wan|pptp</interface>
<protocol>tcp|udp|tcp/udp|...</protocol>
OpenPOWER on IntegriCloud