mirror
/
gluon-packages
mirror of https://github.com/freifunk-gluon/packages.git
1
0
Fork 0
Code Releases Activity
gluon-packages/gluon/gluon-ebtables-filter-ra-dhcp/files/lib/gluon/ebtables/200-dir-dhcpv6

6 lines
320 B
Plaintext
Raw Normal View History

Fix ebtables dhcpv6 rules the ports were interchanged, see the following packet flow: client:546 --> [ff02::1:2]:547 server:547 --> client:546 therefore we need to allow outgoing multicast packets with dst-port 547 and unicast packets from bat0 to clients with dst-port 546 and 547 in the other direction
2014-10-19 16:02:30 +02:00
rule 'FORWARD -p IPv6 --ip6-protocol udp --ip6-destination-port 547 -j OUT_ONLY'
rule 'OUTPUT -p IPv6 --ip6-protocol udp --ip6-destination-port 547 -j OUT_ONLY'
Add ebtables filters from the legacy firmware
2014-01-10 21:48:43 +01:00
Fix ebtables dhcpv6 rules the ports were interchanged, see the following packet flow: client:546 --> [ff02::1:2]:547 server:547 --> client:546 therefore we need to allow outgoing multicast packets with dst-port 547 and unicast packets from bat0 to clients with dst-port 546 and 547 in the other direction
2014-10-19 16:02:30 +02:00
rule 'FORWARD -p IPv6 --ip6-protocol udp --ip6-destination-port 546 -j IN_ONLY'
rule 'INPUT -p IPv6 --ip6-protocol udp --ip6-destination-port 546 -j IN_ONLY'