summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorsmos <seth.mos@dds.nl>2012-04-02 12:58:29 +0200
committersmos <seth.mos@dds.nl>2012-04-02 12:58:29 +0200
commitdbcddabcdf7e4a64e5addfee27621d0c66c333d6 (patch)
tree6c2710123ba2df8fe40ef0b3ca3da32371abcd1e /etc
parente53ffe8d44f95c237a6b5e7d8043ecf45654e5bd (diff)
downloadpfsense-dbcddabcdf7e4a64e5addfee27621d0c66c333d6.zip
pfsense-dbcddabcdf7e4a64e5addfee27621d0c66c333d6.tar.gz
Adjust the DHCP6 client firewall rules
Diffstat (limited to 'etc')
-rw-r--r--etc/inc/filter.inc3
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index eb309d0..473fd64 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2491,7 +2491,8 @@ EOD;
$ipfrules .= <<<EOD
# allow our DHCPv6 client out to the {$oc['descr']}
-pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client out {$oc['descr']}"
+pass in on \${$oc['descr']} proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 label "allow dhcpv6 client in {$oc['descr']}"
+pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client in {$oc['descr']}"
pass out on \${$oc['descr']} proto udp from any port = 546 to any port = 547 label "allow dhcpv6 client out {$oc['descr']}"
EOD;
OpenPOWER on IntegriCloud