From: Wolfgang Bumiller <w.bumiller@proxmox.com>
Date: Fri, 19 Feb 2016 08:43:33 +0000 (+0100)
Subject: Add router-solicitation to NeighborDiscovery macro
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=c71cdd4452f516f801b7374168ec067f6af832f2

Add router-solicitation to NeighborDiscovery macro

to be more consistent with the host-wide NDP option.
This macro is now mostly useful to disable NDP on VMs.
---

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index 25f1cc9..c556be4 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -138,6 +138,7 @@ my $pve_ipv6fw_macros = {
     ],
     'NeighborDiscovery' => [
 	"IPv6 neighbor solicitation, neighbor and router advertisement",
+	{ action => 'PARAM', proto => 'icmpv6', dport => 'router-solicitation' },
 	{ action => 'PARAM', proto => 'icmpv6', dport => 'router-advertisement' },
 	{ action => 'PARAM', proto => 'icmpv6', dport => 'neighbor-solicitation' },
 	{ action => 'PARAM', proto => 'icmpv6', dport => 'neighbor-advertisement' },