]> git.proxmox.com Git - pve-firewall.git/commit - src/PVE/Firewall.pm
projects / pve-firewall.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 147dd88) | patch
ipfilter: imiplicitly add the default link local address
authorWolfgang Bumiller <w.bumiller@proxmox.com>
Tue, 1 Mar 2016 11:20:20 +0000 (12:20 +0100)
committerDietmar Maurer <dietmar@proxmox.com>
Wed, 2 Mar 2016 06:46:34 +0000 (07:46 +0100)
commitebf72e497447556658000e54d098f52430c9d376
tree87291978869b752f59b265f6bc08dc47e0692a0dtree
parent147dd88241c15f24b2ad61b8fda4e39dc08b47e7commit | diff
ipfilter: imiplicitly add the default link local address

When adding an ipset for a device via the 'ipfilter-net$NUM'
name we now implicitly add the default link local address
based on the device's MAC address and a 'nomatch' entry for
the rest of fe80::/10. This is comparable to an ARP/MAC
filter in IPv4 with the main difference that it explicitly
works at IP level.
src/PVE/Firewall.pm diff | blob | blame | history
Firewall test scripts