update config: "firewall: Allow IGMP and MLD input on WAN" (r45613)
Adopt the according modifications to the default firewall settings of the WAN interface from OpenWRT, revision 45613. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
This commit is contained in:
parent
ca9a6f34f3
commit
0fc9e1d966
@ -56,5 +56,31 @@ uci:save('network')
|
||||
uci:commit('network')
|
||||
|
||||
|
||||
uci:section('firewall', 'rule', 'wan_igmp',
|
||||
{
|
||||
name = 'Allow-IGMP',
|
||||
src = 'wan',
|
||||
proto = 'igmp',
|
||||
family = 'ipv4',
|
||||
target = 'ACCEPT',
|
||||
}
|
||||
)
|
||||
|
||||
uci:section('firewall', 'rule', 'wan_mld',
|
||||
{
|
||||
name = 'Allow-MLD',
|
||||
src = 'wan',
|
||||
proto = 'icmp',
|
||||
src_ip = 'fe80::/10',
|
||||
icmp_type = { '130/0', '131/0', '132/0', '143/0', },
|
||||
family = 'ipv6',
|
||||
target = 'ACCEPT',
|
||||
}
|
||||
)
|
||||
|
||||
uci:save('firewall')
|
||||
uci:commit('firewall')
|
||||
|
||||
|
||||
sysctl.set('net.ipv6.conf.all.accept_ra', 0)
|
||||
sysctl.set('net.ipv6.conf.default.accept_ra', 0)
|
||||
|
Loading…
Reference in New Issue
Block a user