From 10ca3f076590d9025840c0c479e8673da4fd18bb Mon Sep 17 00:00:00 2001 From: cyrus Date: Wed, 24 Apr 2013 14:17:24 +0000 Subject: firewall3: Make IPv6 ULA-Border generation dynamic This fixes working behind another router which gives out ULAs. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36416 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- package/network/config/firewall3/files/ipv6-ula-border.sh | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 package/network/config/firewall3/files/ipv6-ula-border.sh (limited to 'package/network/config/firewall3/files/ipv6-ula-border.sh') diff --git a/package/network/config/firewall3/files/ipv6-ula-border.sh b/package/network/config/firewall3/files/ipv6-ula-border.sh new file mode 100644 index 000000000..ebd23a985 --- /dev/null +++ b/package/network/config/firewall3/files/ipv6-ula-border.sh @@ -0,0 +1,6 @@ +#!/bin/sh +ULA_PREFIX=$(uci -q get network.globals.ula_prefix) +[ -n "$ULA_PREFIX" ] || exit 0 + +ip6tables -I delegate_forward -s $ULA_PREFIX -m comment --comment "Enforce ULA-Border" -j zone_wan_dest_REJECT +ip6tables -I delegate_forward -d $ULA_PREFIX -m comment --comment "Enforce ULA-Border" -j zone_wan_dest_REJECT -- cgit v1.2.3