Skip to content

Commit

Permalink
filter/icmpv6, IPv6 FW Rule from WAN IP to ff02 missing, for #3015
Browse files Browse the repository at this point in the history
  • Loading branch information
@AdSchellevis
AdSchellevis committed Dec 6, 2018
1 parent 0a0c80c commit c3213d4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/etc/inc/filter.lib.inc
View file
Original file line number Diff line number Diff line change
Expand Up @@ -226,7 +226,7 @@ function filter_core_rules_system($fw, $defaults)
// Allow only bare essential icmpv6 packets
$fw->registerFilterRule(1,
array('ipprotocol'=>'inet6', 'protocol' => 'ipv6-icmp', 'icmp6-type' => '129,133,134,135,136',
'statetype' => 'keep', 'label' => 'IPv6 requirements (ICMP)', 'from' => 'fe80::/10',
'statetype' => 'keep', 'label' => 'IPv6 requirements (ICMP)', 'from' => '(self)',
'to' => 'fe80::/10,ff02::/16', 'direction' => 'out' ),
$defaults['pass']
);
Expand Down

2 comments on commit c3213d4

@bbaumer
Copy link

@bbaumer bbaumer commented on c3213d4 Dec 6, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, that fixes the Issue for me.

I deactivated my own Rule, verify it in /tmp/rules.debug and do a Reboot.
After the Reboot ndp -atn showed a valid Entry from the Gateway with the Global-Unicast Adress.
A Ping and therefore the IPv6 Gateway Monitoring are functional instandly.

@AdSchellevis
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@bbaumer thanks for confirming, I'll close the issue then

Please sign in to comment.