aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2015-09-25 08:41:12 +0000
committerJo-Philipp Wich <jow@openwrt.org>2015-09-25 08:41:12 +0000
commit0a7382a7004f3276adda7d6ca83073b599dcf34e (patch)
treed22eef73ae82287b30a1140decb4fc806d39d621
parent90b189ae6c44d09ebf7e563caa94bcb692e3269d (diff)
downloadmaster-187ad058-0a7382a7004f3276adda7d6ca83073b599dcf34e.tar.gz
master-187ad058-0a7382a7004f3276adda7d6ca83073b599dcf34e.tar.bz2
master-187ad058-0a7382a7004f3276adda7d6ca83073b599dcf34e.zip
firewall: allow DHCPv6 traffic to/from fc00::/6 instead of fe80::/10
There is no RFC requirement that DHCPv6 servers must reply with a link local address and some ISP servers in the wild appear to using addresses in the ULA range to send DHCPv6 offers. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@47048 3c298f89-4303-0410-b956-a3cf2f4a3e73
-rw-r--r--package/network/config/firewall/files/firewall.config4
1 files changed, 2 insertions, 2 deletions
diff --git a/package/network/config/firewall/files/firewall.config b/package/network/config/firewall/files/firewall.config
index ba7e4ec0b3..749dbecb97 100644
--- a/package/network/config/firewall/files/firewall.config
+++ b/package/network/config/firewall/files/firewall.config
@@ -59,8 +59,8 @@ config rule
option name Allow-DHCPv6
option src wan
option proto udp
- option src_ip fe80::/10
- option dest_ip fe80::/10
+ option src_ip fc00::/6
+ option dest_ip fc00::/6
option dest_port 546
option family ipv6
option target ACCEPT