From 82f2ca6c7791a5c15b40675e75e810bc7b3c79b0 Mon Sep 17 00:00:00 2001 From: jow Date: Fri, 25 Sep 2015 08:41:12 +0000 Subject: [PATCH] firewall: allow DHCPv6 traffic to/from fc00::/6 instead of fe80::/10 There is no RFC requirement that DHCPv6 servers must reply with a link local address and some ISP servers in the wild appear to using addresses in the ULA range to send DHCPv6 offers. Signed-off-by: Jo-Philipp Wich git-svn-id: svn://svn.openwrt.org/openwrt/trunk@47048 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- package/network/config/firewall/files/firewall.config | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package/network/config/firewall/files/firewall.config b/package/network/config/firewall/files/firewall.config index ba7e4ec0b3..749dbecb97 100644 --- a/package/network/config/firewall/files/firewall.config +++ b/package/network/config/firewall/files/firewall.config @@ -59,8 +59,8 @@ config rule option name Allow-DHCPv6 option src wan option proto udp - option src_ip fe80::/10 - option dest_ip fe80::/10 + option src_ip fc00::/6 + option dest_ip fc00::/6 option dest_port 546 option family ipv6 option target ACCEPT -- 2.35.1