From: Wolfgang Bumiller <w.bumiller@proxmox.com>
Date: Tue, 16 Feb 2016 10:20:34 +0000 (+0100)
Subject: ipv6 neighbor discovery and solicitation macros
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=bfd21981f6b9bab8db3b385db8544b9160bec921

ipv6 neighbor discovery and solicitation macros
---

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 47a1aea..b227d70 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -137,6 +137,12 @@ my $pve_ipv6fw_macros = {
     'Ping' => [
 	{ action => 'PARAM', proto => 'icmpv6', dport => 'echo-request' },
     ],
+    'NeighborDiscovery' => [
+	"IPv6 neighbor solicitation, neighbor and router advertisement",
+	{ action => 'PARAM', proto => 'icmpv6', dport => 'router-advertisement' },
+	{ action => 'PARAM', proto => 'icmpv6', dport => 'neighbor-solicitation' },
+	{ action => 'PARAM', proto => 'icmpv6', dport => 'neighbor-advertisement' },
+    ],
     'Trcrt' => [
 	{ action => 'PARAM', proto => 'udp', dport => '33434:33524' },
 	{ action => 'PARAM', proto => 'icmpv6', dport => 'echo-request' },