Skip to content
Snippets Groups Projects
Unverified Commit a2523839 authored by Matthias Schiffer's avatar Matthias Schiffer
Browse files

gluon-core: firewall: remove redundant ICMPv6 output rules

OUTPUT is always accepted, no need to allow ICMPv6 explicitly.
parent fe2048e4
Branches
Tags
No related merge requests found
......@@ -59,26 +59,8 @@ for _, zone in ipairs ({ 'mesh', 'local_client' } ) do
target = 'ACCEPT',
})
uci:section('firewall', 'rule', zone .. '_ICMPv6_out', {
dest = zone,
proto = 'icmp',
icmp_type = {
'echo-request',
'echo-reply',
'destination-unreachable',
'packet-too-big',
'time-exceeded',
'bad-header',
'unknown-header-type',
'router-solicitation',
'neighbour-solicitation',
'router-advertisement',
'neighbour-advertisement',
},
limit = '1000/sec',
family = 'ipv6',
target = 'ACCEPT',
})
-- Can be removed soon: was never in a release
uci:delete('firewall', zone .. '_ICMPv6_out')
end
uci:save('firewall')
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment