diff options
| author | Theo de Raadt <deraadt@cvs.openbsd.org> | 2004-08-07 00:50:26 +0000 |
|---|---|---|
| committer | Theo de Raadt <deraadt@cvs.openbsd.org> | 2004-08-07 00:50:26 +0000 |
| commit | efd3264ee30652d03afd09db97cd318c36c76de0 (patch) | |
| tree | 60668ad70a0ee706598be5773e6de14a6e31557b | |
| parent | 6199f15e3e0651e8399ad97e919a96d69d128ee2 (diff) | |
permit icmp6-type routersol out, and icmp6-type routeradv in, at boot time
| -rw-r--r-- | etc/rc | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -1,4 +1,4 @@ -# $OpenBSD: rc,v 1.249 2004/07/06 04:05:27 henning Exp $ +# $OpenBSD: rc,v 1.250 2004/08/07 00:50:25 deraadt Exp $ # System startup script run by init on autoboot # or after single-user. @@ -138,6 +138,8 @@ if [ "X${pf}" != X"NO" ]; then RULES="$RULES\npass in proto tcp from any to any port 22 keep state" RULES="$RULES\npass out proto { tcp, udp } from any to any port 53 keep state" RULES="$RULES\npass out inet proto icmp all icmp-type echoreq keep state" + RULES="$RULES\npass out inet6 proto icmp6 all icmp6-type routersol" + RULES="$RULES\npass in inet6 proto icmp6 all icmp6-type routeradv" RULES="$RULES\npass proto { pfsync, carp }" case `sysctl vfs.mounts.nfs 2>/dev/null` in *[1-9]*) |