firewall: add type 128 to outgoing IPv6 essentials #4565

This commit is contained in:
Franco Fichtner 2021-01-03 21:39:52 +01:00
parent 7fda1670ce
commit 4e0fdb516a

View File

@ -239,7 +239,7 @@ function filter_core_rules_system($fw, $defaults)
// Allow only bare essential icmpv6 packets
$fw->registerFilterRule(
1,
array('ipprotocol' => 'inet6', 'protocol' => 'ipv6-icmp', 'icmp6-type' => '129,133,134,135,136',
array('ipprotocol' => 'inet6', 'protocol' => 'ipv6-icmp', 'icmp6-type' => '128,129,133,134,135,136',
'statetype' => 'keep', 'descr' => 'IPv6 requirements (ICMP)', 'from' => '(self)',
'to' => 'fe80::/10,ff02::/16', 'direction' => 'out' ),
$defaults['pass']