brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

master
bruns@2mbit.com 2010-05-15 17:20:07 +00:00
parent 6669bd5a4d
commit 5c969e4088
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
rc.firewall
View File

@ -208,13 +208,13 @@ if [ $IPV6 ]; then
-j TCPMSS --clamp-mss-to-pmtu -o $i -m tcpmss \ -j TCPMSS --clamp-mss-to-pmtu -o $i -m tcpmss \
--mss 1400:1536 --mss 1400:1536
# This is necessary to make sure that PMTU works # This is necessary to make sure that PMTU works
$IP6TABLES -A OUTPUT -p icmp --icmp-type time-exceeded \ $IP6TABLES -A OUTPUT -p icmpv6 --icmpv6-type time-exceeded \
-o $i -j ACCEPT -o $i -j ACCEPT
$IP6TABLES -A INPUT -p icmp --icmp-type time-exceeded \ $IP6TABLES -A INPUT -p icmpv6 --icmpv6-type time-exceeded \
-i $i -j ACCEPT -i $i -j ACCEPT
$IP6TABLES -A OUTPUT -p icmp --icmp-type fragmentation-needed \ $IP6TABLES -A OUTPUT -p icmpv6 --icmpv6-type packet-too-big \
-o $i -j ACCEPT -o $i -j ACCEPT
$IP6TABLES -A INPUT -p icmp --icmp-type fragmentation-needed \ $IP6TABLES -A INPUT -p icmpv6 --icmpv6-type packet-too-big \
-i $i -j ACCEPT -i $i -j ACCEPT
done done
fi fi