gluon-core: firewall: remove redundant ICMPv6 output rules
OUTPUT is always accepted, no need to allow ICMPv6 explicitly.
This commit is contained in:
parent
fe2048e4df
commit
a252383918
@ -59,26 +59,8 @@ for _, zone in ipairs ({ 'mesh', 'local_client' } ) do
|
||||
target = 'ACCEPT',
|
||||
})
|
||||
|
||||
uci:section('firewall', 'rule', zone .. '_ICMPv6_out', {
|
||||
dest = zone,
|
||||
proto = 'icmp',
|
||||
icmp_type = {
|
||||
'echo-request',
|
||||
'echo-reply',
|
||||
'destination-unreachable',
|
||||
'packet-too-big',
|
||||
'time-exceeded',
|
||||
'bad-header',
|
||||
'unknown-header-type',
|
||||
'router-solicitation',
|
||||
'neighbour-solicitation',
|
||||
'router-advertisement',
|
||||
'neighbour-advertisement',
|
||||
},
|
||||
limit = '1000/sec',
|
||||
family = 'ipv6',
|
||||
target = 'ACCEPT',
|
||||
})
|
||||
-- Can be removed soon: was never in a release
|
||||
uci:delete('firewall', zone .. '_ICMPv6_out')
|
||||
end
|
||||
|
||||
uci:save('firewall')
|
||||
|
Loading…
Reference in New Issue
Block a user