From e51c5d35754d263ad0621d7935288214c0bf1a5a Mon Sep 17 00:00:00 2001 From: bbruns Date: Wed, 28 Dec 2011 23:33:34 +0000 Subject: [PATCH] Simplifying DHCP rules --- bin/firewall-sosdg | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bin/firewall-sosdg b/bin/firewall-sosdg index 695dad1..08e7a95 100755 --- a/bin/firewall-sosdg +++ b/bin/firewall-sosdg @@ -818,9 +818,9 @@ fi if [ "$IPV6_LANDHCPSERVER" ]; then for i in $IPV6_LANDHCPSERVER; do $IP6TABLES -A INPUT -i $i -p udp --sport 546:547 --dport 546:547 -j ACCEPT - $IP6TABLES -A INPUT -i $i -p tcp --sport 546:547 --dport 546:547 -j ACCEPT + #$IP6TABLES -A INPUT -i $i -p tcp --sport 546:547 --dport 546:547 -j ACCEPT $IP6TABLES -A OUTPUT -o $i -p udp --sport 546:547 --dport 546:547 -j ACCEPT - $IP6TABLES -A OUTPUT -o $i -p tcp --sport 546:547 --dport 546:547 -j ACCEPT + #$IP6TABLES -A OUTPUT -o $i -p tcp --sport 546:547 --dport 546:547 -j ACCEPT #$IP6TABLES -A INPUT -i $i -p udp -d ff02::1:2 --sport 546:547 --dport 546:547 -j ACCEPT #$IP6TABLES -A INPUT -i $i -p tcp -d ff02::1:2 --sport 546:547 --dport 546:547 -j ACCEPT #$IP6TABLES -A OUTPUT -o $i -p udp -d fe80::/16 --sport 546:547 --dport 546:547 -j ACCEPT