Browse Source

firewall: allow ICMPv6 type 129 (echo reply) - this fixes basic ICMPv6 in case no connection tracking is used

SVN-Revision: 30727
Jo-Philipp Wich 14 years ago
parent
commit
9aaca7f1b1
2 changed files with 3 additions and 1 deletions
  1. 1 1
      package/firewall/Makefile
  2. 2 0
      package/firewall/files/firewall.config

+ 1 - 1
package/firewall/Makefile

@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 PKG_NAME:=firewall
 PKG_NAME:=firewall
 
 
 PKG_VERSION:=2
 PKG_VERSION:=2
-PKG_RELEASE:=46
+PKG_RELEASE:=47
 
 
 include $(INCLUDE_DIR)/package.mk
 include $(INCLUDE_DIR)/package.mk
 
 

+ 2 - 0
package/firewall/files/firewall.config

@@ -64,6 +64,7 @@ config rule
 	option src		wan
 	option src		wan
 	option proto	icmp
 	option proto	icmp
 	list icmp_type		echo-request
 	list icmp_type		echo-request
+	list icmp_type		echo-reply
 	list icmp_type		destination-unreachable
 	list icmp_type		destination-unreachable
 	list icmp_type		packet-too-big
 	list icmp_type		packet-too-big
 	list icmp_type		time-exceeded
 	list icmp_type		time-exceeded
@@ -82,6 +83,7 @@ config rule
 	option dest		*
 	option dest		*
 	option proto		icmp
 	option proto		icmp
 	list icmp_type		echo-request
 	list icmp_type		echo-request
+	list icmp_type		echo-reply
 	list icmp_type		destination-unreachable
 	list icmp_type		destination-unreachable
 	list icmp_type		packet-too-big
 	list icmp_type		packet-too-big
 	list icmp_type		time-exceeded
 	list icmp_type		time-exceeded