From 07958f01ddf957a4995f862c14e1ca366ebdcc1d Mon Sep 17 00:00:00 2001 From: Wolfgang Bumiller Date: Fri, 19 Feb 2016 09:43:33 +0100 Subject: [PATCH] Add router-solicitation to NeighborDiscovery macro to be more consistent with the host-wide NDP option. This macro is now mostly useful to disable NDP on VMs. --- src/PVE/Firewall.pm | 1 + 1 file changed, 1 insertion(+) diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm index 762816f..8bd45c5 100644 --- a/src/PVE/Firewall.pm +++ b/src/PVE/Firewall.pm @@ -139,6 +139,7 @@ my $pve_ipv6fw_macros = { ], 'NeighborDiscovery' => [ "IPv6 neighbor solicitation, neighbor and router advertisement", + { action => 'PARAM', proto => 'icmpv6', dport => 'router-solicitation' }, { action => 'PARAM', proto => 'icmpv6', dport => 'router-advertisement' }, { action => 'PARAM', proto => 'icmpv6', dport => 'neighbor-solicitation' }, { action => 'PARAM', proto => 'icmpv6', dport => 'neighbor-advertisement' }, -- 2.39.2