openwrt/package/network/config/firewall/files
Andy Chiang 4ad22d0342
Some checks failed
Build all core packages / Build all core packages for selected target (push) Waiting to run
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
firewall: config: add dest addr restrictions for DHCPv6 rules
Some ISPs may use a GUA or other non-LLA as the source addr for the DHCPv6 response, but the destination addr is always LLA (fe80::/10).
Therefore, adding a dest addr restriction improves security.
See https://forum.mikrotik.com/t/xfinity-comcast-dhcpv6-configuration-change/156031/10

Signed-off-by: Andy Chiang <AndyChiang_git@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/20562
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-10 15:23:16 +01:00
..
firewall.config firewall: config: add dest addr restrictions for DHCPv6 rules 2025-11-10 15:23:16 +01:00
firewall.hotplug firewall: don't reload if there were no address or data changes 2014-01-19 17:35:33 +00:00
firewall.init package/*: remove useless explicit set of function returncode 2014-08-25 06:35:50 +00:00
firewall.user firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA 2013-06-04 12:21:52 +00:00