Skip to content

Commit

Permalink
firewall: for testing make it quick and prio 1 like IPv6
Browse files Browse the repository at this point in the history
  • Loading branch information
fichtner committed Apr 10, 2023
1 parent d08a425 commit 3ed4f6d
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions src/etc/inc/filter.lib.inc
Original file line number Diff line number Diff line change
Expand Up @@ -393,22 +393,22 @@ function filter_core_rules_system($fw, $defaults)
break;
case "dhcp":
$fw->registerFilterRule(
5,
array('protocol' => 'udp', 'direction' => 'in', 'quick' => false, 'from_port' => 67, 'to_port' => 68,
1,
array('protocol' => 'udp', 'direction' => 'in', 'from_port' => 67, 'to_port' => 68,
'#ref' => "interfaces.php?if=" . $intf . "#type",
'interface' => $intf, 'descr' => 'allow DHCP client on ' . $intfinfo['descr']),
$defaults['pass']
);
$dhcpv4_opts = [
'protocol' => 'udp','direction' => 'out', 'quick' => false, 'from_port' => 68, 'to_port' => 67,
'protocol' => 'udp','direction' => 'out', 'from_port' => 68, 'to_port' => 67,
'#ref' => "interfaces.php?if=" . $intf . "#type",
'interface' => $intf, 'descr' => 'allow DHCP client on ' . $intfinfo['descr'],
];
/* XXX it looks like we need a property for IPv4 VLAN PCP again */
if (isset($intfinfo['dhcp6vlanprio'])) {
$dhcpv4_opts['set-prio'] = $intfinfo['dhcp6vlanprio'];
}
$fw->registerFilterRule(5, $dhcpv4_opts, $defaults['pass']);
$fw->registerFilterRule(1, $dhcpv4_opts, $defaults['pass']);
break;
default:
if (isset($config['dhcpd'][$intf]['enable'])) {
Expand Down

0 comments on commit 3ed4f6d

Please sign in to comment.