mr/openwrt
2
0
Fork 1
Code Issues 7 Pull Requests Releases Wiki Activity

firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet

Browse Source 
SVN-Revision: 35012
This commit is contained in:
Steven Barth 2013-01-04 15:59:28 +00:00
parent e952eaa112
commit b077480a59
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/network/config/firewall/Makefile
View File

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=firewall
PKG_VERSION:=2
PKG_RELEASE:=55
PKG_RELEASE:=56
include $(INCLUDE_DIR)/package.mk

19
package/network/config/firewall/files/firewall.config
View File

@ -95,6 +95,25 @@ config rule
option family ipv6
option target ACCEPT
# Block ULA-traffic from leaking out
config rule
option name Enforce-ULA-Border-Src
option src *
option dest wan
option proto all
option src_ip fc00::/7
option family ipv6
option target REJECT
config rule
option name Enforce-ULA-Border-Dest
option src *
option dest wan
option proto all
option dest_ip fc00::/7
option family ipv6
option target REJECT
# include a file with users custom iptables rules
config include
option path /etc/firewall.user