summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorRenato Botelho <garga@FreeBSD.org>2014-02-18 20:31:47 -0300
committerRenato Botelho <garga@FreeBSD.org>2014-02-18 20:31:59 -0300
commit56e3ea85c1e1006024fcf66ac084195cf10cf144 (patch)
treead1d880760883969e9c609bc969c9b4f6c57eee6 /etc
parentb74bf6859b149c21c990d19cd30acb3d61b50bca (diff)
downloadpfsense-56e3ea85c1e1006024fcf66ac084195cf10cf144.zip
pfsense-56e3ea85c1e1006024fcf66ac084195cf10cf144.tar.gz
Only add dhcpv6 client allow rules if ipv6allow is set
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/filter.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index a5d8135..287fa3a 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2671,7 +2671,7 @@ block in $bogonlog quick on \${$oc['descr']} from <bogons> to any label "{$fix_r
EOD;
}
- if($oc['type6'] == "slaac" || $oc['type6'] == "dhcp6") {
+ if(isset($config['system']['ipv6allow']) && ($oc['type6'] == "slaac" || $oc['type6'] == "dhcp6")) {
$ipfrules .= <<<EOD
# allow our DHCPv6 client out to the {$oc['descr']}
pass in quick on \${$oc['descr']} proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 label "{$fix_rule_label("allow dhcpv6 client in {$oc['descr']}")}"
OpenPOWER on IntegriCloud