From f99d1d20e029bbffda93ca4e82f5c8361df074a7 Mon Sep 17 00:00:00 2001 From: Jamie Cameron Date: Sat, 18 Feb 2017 14:14:10 -0800 Subject: [PATCH] Allow all types of ICMPv6 traffic https://sourceforge.net/p/webadmin/bugs/4900/ --- firewall6/setup.cgi | 27 +-------------------------- 1 file changed, 1 insertion(+), 26 deletions(-) diff --git a/firewall6/setup.cgi b/firewall6/setup.cgi index d76f8d3c0..94609e264 100755 --- a/firewall6/setup.cgi +++ b/firewall6/setup.cgi @@ -108,33 +108,8 @@ if ($in{'auto'}) { { 'chain' => 'INPUT', 'm' => [ [ "", "icmpv6" ] ], 'p' => [ [ "", "icmpv6" ] ], - 'icmpv6-type' => [ "", "echo-reply" ], 'j' => [ "", 'ACCEPT' ], - 'cmt' => 'Accept responses to our pings' }, - { 'chain' => 'INPUT', - 'm' => [ [ "", "icmpv6" ] ], - 'p' => [ [ "", "icmpv6" ] ], - 'icmpv6-type' => [ "", "destination-unreachable" ], - 'j' => [ "", 'ACCEPT' ], - 'cmt' => 'Accept notifications of unreachable hosts' }, - { 'chain' => 'INPUT', - 'm' => [ [ "", "icmpv6" ] ], - 'p' => [ [ "", "icmpv6" ] ], - 'icmpv6-type' => [ "", "packet-too-big" ], - 'j' => [ "", 'ACCEPT' ], - 'cmt' => 'Accept notifications to reduce sending speed' }, - { 'chain' => 'INPUT', - 'm' => [ [ "", "icmpv6" ] ], - 'p' => [ [ "", "icmpv6" ] ], - 'icmpv6-type' => [ "", "time-exceeded" ], - 'j' => [ "", 'ACCEPT' ], - 'cmt' => 'Accept notifications of lost packets' }, - { 'chain' => 'INPUT', - 'm' => [ [ "", "icmpv6" ] ], - 'p' => [ [ "", "icmpv6" ] ], - 'icmpv6-type' => [ "", "parameter-problem" ], - 'j' => [ "", 'ACCEPT' ], - 'cmt' => 'Accept notifications of protocol problems' } + 'cmt' => 'Accept all ICMPv6 traffic' }, ); if ($in{'auto'} >= 3) { # Allow ssh and ident