config: remove restictions on DHCPv6 allow rule
authorTiago Gaspar <tiagogaspar8@gmail.com>
Wed, 4 May 2022 09:36:07 +0000 (10:36 +0100)
committerJo-Philipp Wich <jo@mein.io>
Wed, 4 May 2022 13:22:53 +0000 (15:22 +0200)
Remove restrictions on source and destination addresses, which aren't
specified on RFC8415, and for some reason in openwrt are configured
to allow both link-local and ULA addresses.
As cleared out in issue #5066 there are some ISPs that use Gloabal
Unicast addresses, so fix this rule to allow them.

Fixes: #5066
Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
root/etc/config/firewall

index f4a3322a7d056b5dd3763e93ba1da5de822571ad..b9a4647fdb224910e1a39e005cc62e1f60de6a95 100644 (file)
@@ -54,13 +54,11 @@ config rule
        option target           ACCEPT
 
 # Allow DHCPv6 replies
-# see https://dev.openwrt.org/ticket/10381
+# see https://github.com/openwrt/openwrt/issues/5066
 config rule
        option name             Allow-DHCPv6
        option src              wan
        option proto            udp
-       option src_ip           fc00::/6
-       option dest_ip          fc00::/6
        option dest_port        546
        option family           ipv6
        option target           ACCEPT