SW/openwrt
2
0
Fork 0
forked from Ivasoft/openwrt
Code Pull Requests Activity

firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet

Browse Source 
SVN-Revision: 35012
This commit is contained in:
Steven Barth
2013-01-04 15:59:28 +00:00
parent e952eaa112
commit b077480a59
2 changed files with 20 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
package/network/config/firewall/files/firewall.config
View File

@@ -95,6 +95,25 @@ config rule
option family ipv6
option target ACCEPT
# Block ULA-traffic from leaking out
config rule
option name Enforce-ULA-Border-Src
option src *
option dest wan
option proto all
option src_ip fc00::/7
option family ipv6
option target REJECT
config rule
option name Enforce-ULA-Border-Dest
option src *
option dest wan
option proto all
option dest_ip fc00::/7
option family ipv6
option target REJECT
# include a file with users custom iptables rules
config include
option path /etc/firewall.user