Explorar o código

Allow DHCPv6 replies on uplink interface, if ipv6 is enabled

Fixes QubesOS/qubes-issues#5886
Marek Marczykowski-Górecki %!s(int64=3) %!d(string=hai) anos
pai
achega
f66a494cc2
Modificáronse 1 ficheiros con 1 adicións e 0 borrados
  1. 1 0
      network/ip6tables-enabled

+ 1 - 0
network/ip6tables-enabled

@@ -26,6 +26,7 @@ COMMIT
 -A INPUT -m state --state INVALID -j DROP
 -A INPUT -i lo -j ACCEPT
 -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
+-A INPUT ! -i vif+ -p udp -s fe80::/64 -d fe80::/64 --dport 546 -j ACCEPT
 -A INPUT -i vif+ -p icmpv6 --icmpv6-type router-advertisement -j DROP
 -A INPUT -i vif+ -p icmpv6 --icmpv6-type redirect -j DROP
 -A INPUT -i vif+ -p icmpv6 -j ACCEPT