From 5c969e4088013fc86691e50c16624ce4f88838d7 Mon Sep 17 00:00:00 2001 From: "bruns@2mbit.com" Date: Sat, 15 May 2010 17:20:07 +0000 Subject: [PATCH] --- rc.firewall | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/rc.firewall b/rc.firewall index 5ff0951..372a261 100755 --- a/rc.firewall +++ b/rc.firewall @@ -208,13 +208,13 @@ if [ $IPV6 ]; then -j TCPMSS --clamp-mss-to-pmtu -o $i -m tcpmss \ --mss 1400:1536 # This is necessary to make sure that PMTU works - $IP6TABLES -A OUTPUT -p icmp --icmp-type time-exceeded \ + $IP6TABLES -A OUTPUT -p icmpv6 --icmpv6-type time-exceeded \ -o $i -j ACCEPT - $IP6TABLES -A INPUT -p icmp --icmp-type time-exceeded \ + $IP6TABLES -A INPUT -p icmpv6 --icmpv6-type time-exceeded \ -i $i -j ACCEPT - $IP6TABLES -A OUTPUT -p icmp --icmp-type fragmentation-needed \ + $IP6TABLES -A OUTPUT -p icmpv6 --icmpv6-type packet-too-big \ -o $i -j ACCEPT - $IP6TABLES -A INPUT -p icmp --icmp-type fragmentation-needed \ + $IP6TABLES -A INPUT -p icmpv6 --icmpv6-type packet-too-big \ -i $i -j ACCEPT done fi