X-Git-Url: https://git.rohieb.name/openwrt.git/blobdiff_plain/86a3fe1a88dce6531edb8653c45ff2477d6fa9d9..f76aa7d45911c64a1c86d90ac5cc8c5885342da6:/package/firewall/files/firewall.config

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
index b47823fe2..4ba165fcc 100644
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -43,7 +43,35 @@ config rule
 	option family		ipv4
 	option target		ACCEPT
 
+# Allow DHCPv6 replies
+# see https://dev.openwrt.org/ticket/10381
+config rule
+	option src		wan
+	option proto		udp
+	option src_ip		fe80::/10
+	option src_port		547
+	option dest_ip		fe80::/10
+	option dest_port	546
+	option family		ipv6
+	option target		ACCEPT
+
 # Allow essential incoming IPv6 ICMP traffic
+config rule
+	option src		wan
+	option proto	icmp
+	list icmp_type		echo-request
+	list icmp_type		destination-unreachable
+	list icmp_type		packet-too-big
+	list icmp_type		time-exceeded
+	list icmp_type		bad-header
+	list icmp_type		unknown-header-type
+	list icmp_type		router-solicitation
+	list icmp_type		neighbour-solicitation
+	option limit		1000/sec
+	option family		ipv6
+	option target		ACCEPT
+
+# Allow essential forwarded IPv6 ICMP traffic
 config rule                                   
 	option src		wan
 	option dest		*