]> git.proxmox.com Git - pve-firewall.git/commit
projects / pve-firewall.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bb41b35) | patch
ndp: use PVEFW-SET-ACCEPT-MARK and move rules further down
authorWolfgang Bumiller <w.bumiller@proxmox.com>
Tue, 1 Mar 2016 11:20:17 +0000 (12:20 +0100)
committerWolfgang Bumiller <w.bumiller@proxmox.com>
Mon, 7 Mar 2016 13:01:06 +0000 (14:01 +0100)
commiteb962d2f22ad15ccc663d4fe9e1580c7a2ab79bf
treee459601610359f47eeb00c7d0cdc33d58da4ca62tree
parentbb41b357eb1079d3871ecfe61ca920b39b9f1d0ccommit | diff
ndp: use PVEFW-SET-ACCEPT-MARK and move rules further down

On host level: moved NDP to after connection tracking and
switched to RETURN instead of ACCEPT.

On VM level:
The output direction now uses the accept-mark like the dhcp
option does, too.
Also moved NDP rules below the macfilter & ipset rules.
src/PVE/Firewall.pm diff | blob | blame | history
Firewall test scripts