mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-02-15 03:51:51 +00:00
Code Issues Releases Wiki Activity

Accept ICMPv6 from LAN to router

Browse source
This commit is contained in:
Ycarus 2018-07-14 07:25:08 +02:00
parent 4020e11a44
commit ed45459144
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
openmptcprouter/files/etc/uci-defaults/1980-omr-firewall
View file

@ -55,6 +55,21 @@ if [ "$(uci -q show firewall | grep Allow-Lan-to-Wan)" = "" ]; then
commit firewall
EOF
fi
if [ "$(uci -q show firewall | grep ICMPv6-Lan-to-OMR)" = "" ]; then
uci -q batch <<-EOF >/dev/null
add firewall rule
set firewall.@rule[-1].enabled='1'
set firewall.@rule[-1].target='ACCEPT'
set firewall.@rule[-1].name='ICMPv6-Lan-to-OMR'
set firewall.@rule[-1].src='lan'
set firewall.@rule[-1].family='ipv6'
set firewall.@rule[-1].proto='icmp'
set firewall.@rule[-1].limit='1000/sec'
set firewall.@rule[-1].icmp_type='echo-reply destination-unreachable echo-request router-advertisement router-solicitation time-exceeded'
commit firewall
EOF
fi
rm -f /tmp/luci-indexcache
exit 0