diff options
| author | smos <seth.mos@dds.nl> | 2011-08-18 11:39:45 +0200 |
|---|---|---|
| committer | smos <seth.mos@dds.nl> | 2011-08-18 11:39:45 +0200 |
| commit | 5a3031ea170c386e9240c2f5622ede590826bdcf (patch) | |
| tree | 713dabbe2c3dca6ec221b24d4b08eb120a166a0f /etc | |
| parent | 49047fb471f382bba689cffad9e313600c6b0519 (diff) | |
| download | pfsense-5a3031ea170c386e9240c2f5622ede590826bdcf.zip pfsense-5a3031ea170c386e9240c2f5622ede590826bdcf.tar.gz | |
Make sure that we disable accepting router advertisements unless we explicitly enable them
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/inc/interfaces.inc | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/etc/inc/interfaces.inc b/etc/inc/interfaces.inc index cba1454..cff2fd1 100644 --- a/etc/inc/interfaces.inc +++ b/etc/inc/interfaces.inc @@ -2659,13 +2659,14 @@ function interface_configure($interface = "wan", $reloadall = false, $linkupeven // Need code to handle MLPPP if we ever use $realhwif for MLPPP handling $realhwif = $realhwif_array[0]; + /* Disable Accepting router advertisements unless specifically requested */ + log_error("Deny router advertisements for interface {$interface}"); + mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " inet6 -accept_rtadv"); if (!$g['booting'] && !substr($realif, 0, 4) == "ovpn") { /* remove all IPv4 and IPv6 addresses */ while (mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " -alias", true) == 0); while (mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " inet6 -alias", true) == 0); - /* Disable Accepting router advertisements unless specifically requested */ - while (mwexec("/sbin/ifconfig " . escapeshellarg($realif) . " inet6 -accept_rtadv") == 0); /* only bring down the interface when both v4 and v6 are set to NONE */ if(($wancfg['ipaddr'] <> "none") && ($wancfg['ipaddrv6'] <> "none")) { |
