holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

AllowICMPs: allowing redirects is a security issue and not required

Browse Source 
Also redirect source must be fe80::/10

Signed-off-by: Tuomo Soini <tis@foobar.fi>
This commit is contained in:
Tuomo Soini 2024-03-19 11:02:31 +02:00
parent aae5baedfd
commit 0de5e88018
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Shorewall/Actions/action.AllowICMPs
View File

@ -23,7 +23,6 @@ DEFAULTS ACCEPT
@1 - - ipv6-icmp router-advertisement @1 - - ipv6-icmp router-advertisement
@1 - - ipv6-icmp neighbour-solicitation @1 - - ipv6-icmp neighbour-solicitation
@1 - - ipv6-icmp neighbour-advertisement @1 - - ipv6-icmp neighbour-advertisement
@1 - - ipv6-icmp 137 # Redirect
@1 - - ipv6-icmp 141 # Inverse neighbour discovery solicitation @1 - - ipv6-icmp 141 # Inverse neighbour discovery solicitation
@1 - - ipv6-icmp 142 # Inverse neighbour discovery advertisement @1 - - ipv6-icmp 142 # Inverse neighbour discovery advertisement