update config: "firewall: Allow IGMP and MLD input on WAN" (r45613)
Adopt the according modifications to the default firewall settings of the WAN interface from OpenWRT, revision 45613. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
This commit is contained in:
		
							parent
							
								
									ca9a6f34f3
								
							
						
					
					
						commit
						0fc9e1d966
					
				| @ -56,5 +56,31 @@ uci:save('network') | ||||
| uci:commit('network') | ||||
| 
 | ||||
| 
 | ||||
| uci:section('firewall', 'rule', 'wan_igmp', | ||||
| 	    { | ||||
| 	       name = 'Allow-IGMP', | ||||
| 	       src = 'wan', | ||||
| 	       proto = 'igmp', | ||||
| 	       family = 'ipv4', | ||||
| 	       target = 'ACCEPT', | ||||
| 	    } | ||||
| ) | ||||
| 
 | ||||
| uci:section('firewall', 'rule', 'wan_mld', | ||||
| 	    { | ||||
| 	       name = 'Allow-MLD', | ||||
| 	       src = 'wan', | ||||
| 	       proto = 'icmp', | ||||
| 	       src_ip = 'fe80::/10', | ||||
| 	       icmp_type = { '130/0', '131/0', '132/0', '143/0', }, | ||||
| 	       family = 'ipv6', | ||||
| 	       target = 'ACCEPT', | ||||
| 	    } | ||||
| ) | ||||
| 
 | ||||
| uci:save('firewall') | ||||
| uci:commit('firewall') | ||||
| 
 | ||||
| 
 | ||||
| sysctl.set('net.ipv6.conf.all.accept_ra', 0) | ||||
| sysctl.set('net.ipv6.conf.default.accept_ra', 0) | ||||
|  | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user