Skip to content
Snippets Groups Projects
Unverified Commit a2523839 authored by Matthias Schiffer's avatar Matthias Schiffer
Browse files

gluon-core: firewall: remove redundant ICMPv6 output rules

OUTPUT is always accepted, no need to allow ICMPv6 explicitly.
parent fe2048e4
No related branches found
No related tags found
No related merge requests found
......@@ -59,26 +59,8 @@ for _, zone in ipairs ({ 'mesh', 'local_client' } ) do
target = 'ACCEPT',
})
uci:section('firewall', 'rule', zone .. '_ICMPv6_out', {
dest = zone,
proto = 'icmp',
icmp_type = {
'echo-request',
'echo-reply',
'destination-unreachable',
'packet-too-big',
'time-exceeded',
'bad-header',
'unknown-header-type',
'router-solicitation',
'neighbour-solicitation',
'router-advertisement',
'neighbour-advertisement',
},
limit = '1000/sec',
family = 'ipv6',
target = 'ACCEPT',
})
-- Can be removed soon: was never in a release
uci:delete('firewall', zone .. '_ICMPv6_out')
end
uci:save('firewall')
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment