From 000d9e71ae058ccbb7d65a061ccf2a1dd14fe0a5 Mon Sep 17 00:00:00 2001
From: Seth Mos <seth.mos@dds.nl>
Date: Fri, 6 May 2011 13:08:04 +0000
Subject: Add the ipv6 allow tag to the default config. Add a default allow
 rule for the LAN with IPv6 Add a dhcp-pd sla-id of 0 for the WAN. Add a
 dhcp-pd length of 0 for the WAN

---
 conf.default/config.xml | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

(limited to 'conf.default/config.xml')

diff --git a/conf.default/config.xml b/conf.default/config.xml
index b291c38..77accc5 100644
--- a/conf.default/config.xml
+++ b/conf.default/config.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <!-- pfSense default system configuration -->
 <pfsense>
-	<version>7.8</version>
+	<version>7.9</version>
 	<lastchange></lastchange>
 	<theme>pfsense_ng</theme>
 	<sysctl>
@@ -187,6 +187,7 @@
 		<!-- <harddiskstandby></harddiskstandby> -->
 		<disablesegmentationoffloading/>
 		<disablelargereceiveoffloading/>
+		<ipv6allow/>
 	</system>
 	<interfaces>
 		<wan>
@@ -202,6 +203,8 @@
 			<dhcphostname></dhcphostname>
 			<media></media>
 			<mediaopt></mediaopt>
+			<dhcp6-duid></dhcp6-duid>
+			<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
 			<!--
 			<wireless>
 				*see below (opt[n])*
@@ -213,8 +216,11 @@
 			<if>vr0</if>
 			<ipaddr>192.168.1.1</ipaddr>
 			<subnet>24</subnet>
+			<ipaddrv6>fe80::192:168:1:1</ipaddrv6>
+			<subnetv6>64</subnetv6>
 			<media></media>
 			<mediaopt></mediaopt>
+			<dhcp6-pd-sla-id>0</dhcp6-pd-sla-id>
 			<!--
 			<wireless>
 				*see below (opt[n])*
@@ -422,6 +428,7 @@
 		<!-- <tcpidletimeout></tcpidletimeout> -->
 		<rule>
 			<type>pass</type>
+			<ipprotocol>inet</ipprotocol>
 			<descr><![CDATA[Default allow LAN to any rule]]></descr>
 			<interface>lan</interface>
 			<source>
@@ -431,11 +438,24 @@
 				<any/>
 			</destination>
 		</rule>
+		<rule>
+			<type>pass</type>
+			<ipprotocol>inet6</ipprotocol>
+			<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
+			<interface>lan</interface>
+			<source>
+				<network>lan</network>
+			</source>
+			<destination>
+				<any/>
+			</destination>
+		</rule>
 		<!-- rule syntax:
 		<rule>
 			<disabled/>
 			<id>[0-9]*</id>
 			<type>pass|block|reject</type>
+			<ipprotocol>inet|inet6</ipprotocol>
 			<descr>...</descr>
 			<interface>lan|opt[n]|wan|pptp</interface>
 			<protocol>tcp|udp|tcp/udp|...</protocol>
-- 
cgit v1.1