firewall: allow ICMPv6 type 129 (echo reply) - this fixes basic ICMPv6 in case no connection tracking is used

SVN-Revision: 30727
This commit is contained in:
Jo-Philipp Wich 2012-02-25 21:00:23 +00:00
parent 4dc4ebe0c8
commit 9aaca7f1b1
2 changed files with 3 additions and 1 deletions

View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=firewall PKG_NAME:=firewall
PKG_VERSION:=2 PKG_VERSION:=2
PKG_RELEASE:=46 PKG_RELEASE:=47
include $(INCLUDE_DIR)/package.mk include $(INCLUDE_DIR)/package.mk

View file

@ -64,6 +64,7 @@ config rule
option src wan option src wan
option proto icmp option proto icmp
list icmp_type echo-request list icmp_type echo-request
list icmp_type echo-reply
list icmp_type destination-unreachable list icmp_type destination-unreachable
list icmp_type packet-too-big list icmp_type packet-too-big
list icmp_type time-exceeded list icmp_type time-exceeded
@ -82,6 +83,7 @@ config rule
option dest * option dest *
option proto icmp option proto icmp
list icmp_type echo-request list icmp_type echo-request
list icmp_type echo-reply
list icmp_type destination-unreachable list icmp_type destination-unreachable
list icmp_type packet-too-big list icmp_type packet-too-big
list icmp_type time-exceeded list icmp_type time-exceeded