1
0
Fork 0
forked from mirror/openwrt
openwrt/package/network/config/firewall/files
Andy Chiang 4ad22d0342 firewall: config: add dest addr restrictions for DHCPv6 rules
Some ISPs may use a GUA or other non-LLA as the source addr for the DHCPv6 response, but the destination addr is always LLA (fe80::/10).
Therefore, adding a dest addr restriction improves security.
See https://forum.mikrotik.com/t/xfinity-comcast-dhcpv6-configuration-change/156031/10

Signed-off-by: Andy Chiang <AndyChiang_git@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/20562
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-10 15:23:16 +01:00
..
firewall.config firewall: config: add dest addr restrictions for DHCPv6 rules 2025-11-10 15:23:16 +01:00
firewall.hotplug firewall: don't reload if there were no address or data changes 2014-01-19 17:35:33 +00:00
firewall.init package/*: remove useless explicit set of function returncode 2014-08-25 06:35:50 +00:00
firewall.user