summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www/system_advanced_network.php
diff options
context:
space:
mode:
authorstilez <stilez@users.noreply.github.com>2017-01-07 20:55:45 +0000
committerRenato Botelho <renato@netgate.com>2017-01-09 10:26:44 -0200
commit66dba4d7d5b5076610545680fa132a73efbd5ed0 (patch)
tree63d7711a22ea173cb89c93740311364a69c81409 /src/usr/local/www/system_advanced_network.php
parent2f93ba9e88a2abda621078ba23b2d0522ab103ce (diff)
downloadpfsense-66dba4d7d5b5076610545680fa132a73efbd5ed0.zip
pfsense-66dba4d7d5b5076610545680fa132a73efbd5ed0.tar.gz
clarify type of firewall rule needed
A comment on the original PR says that it's not clear if the rule for this needs to be IPv6 or IPv4 with protocol IPv6, and users get confused. I've tried to clarify it here. I've also tried to "de-mystify" it, because it's not that tunneling needs special rules, it's just that any traffic needs rules and tunneled traffic is handled as IPv6 for rules purposes, so it needs an IPv6 rule. But the user may want other rules, or selective rules, so I'[ve tried to be clear this isn't about some "special" IPv6 rule, but rather, just that any traffic desired to pass, will need one or more IPv6 rules permitting it. (cherry picked from commit 3509ad4f9215ff46d7a8684e0559bb93c1bd7a78)
Diffstat (limited to 'src/usr/local/www/system_advanced_network.php')
-rw-r--r--src/usr/local/www/system_advanced_network.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/src/usr/local/www/system_advanced_network.php b/src/usr/local/www/system_advanced_network.php
index 6aa003a..a20286e 100644
--- a/src/usr/local/www/system_advanced_network.php
+++ b/src/usr/local/www/system_advanced_network.php
@@ -217,8 +217,9 @@ $group->add(new Form_Input(
));
$group->setHelp('These options create an RFC 2893 compatible mechanism for IPv4 NAT encapsulation of IPv6 packets, ' .
- 'that can be used to tunnel IPv6 packets over IPv4 routing infrastructures. A firewall rule to pass IPv6 packets ' .
- 'is <a href="firewall_rules.php">also necessary</a>.');
+ 'that can be used to tunnel IPv6 packets over IPv4 routing infrastructures. ' .
+ 'IPv6 firewall rules are <a href="firewall_rules.php">also required</a>, to control and pass encapsulated traffic.');
+
$section->add($group);
OpenPOWER on IntegriCloud