update config: "firewall: Allow IGMP and MLD input on WAN" (r45613)

Adopt the according modifications to the default firewall settings of
the WAN interface from OpenWRT, revision 45613.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
This commit is contained in:
Linus Lüssing 2016-03-08 07:55:55 +01:00
parent ca9a6f34f3
commit 0fc9e1d966
1 changed files with 26 additions and 0 deletions

View File

@ -56,5 +56,31 @@ uci:save('network')
uci:commit('network')
uci:section('firewall', 'rule', 'wan_igmp',
{
name = 'Allow-IGMP',
src = 'wan',
proto = 'igmp',
family = 'ipv4',
target = 'ACCEPT',
}
)
uci:section('firewall', 'rule', 'wan_mld',
{
name = 'Allow-MLD',
src = 'wan',
proto = 'icmp',
src_ip = 'fe80::/10',
icmp_type = { '130/0', '131/0', '132/0', '143/0', },
family = 'ipv6',
target = 'ACCEPT',
}
)
uci:save('firewall')
uci:commit('firewall')
sysctl.set('net.ipv6.conf.all.accept_ra', 0)
sysctl.set('net.ipv6.conf.default.accept_ra', 0)