210d0432a3
Yes it is almost code freeze, but as the result of many thought, now I think this should be added before 4.0... make world check, kernel build check is done. Reviewed by: green Obtained from: KAME project
29 lines
580 B
Bash
29 lines
580 B
Bash
#!/bin/sh -
|
|
# $FreeBSD$
|
|
|
|
fwcmd=/usr/local/v6/sbin/ip6fw
|
|
|
|
$fwcmd -f flush
|
|
|
|
#
|
|
# loopback
|
|
#
|
|
$fwcmd add 1000 pass all from any to any via lo0
|
|
|
|
#
|
|
# ND
|
|
#
|
|
# DAD
|
|
$fwcmd add 2000 pass ipv6-icmp from ff02::/16 to ::
|
|
$fwcmd add 2100 pass ipv6-icmp from :: to ff02::/16
|
|
# RS, RA, NS, NA, redirect...
|
|
$fwcmd add 2300 pass ipv6-icmp from fe80::/10 to fe80::/10
|
|
$fwcmd add 2400 pass ipv6-icmp from fe80::/10 to ff02::/16
|
|
|
|
$fwcmd add 5000 pass tcp from any to any established
|
|
|
|
# RIPng
|
|
$fwcmd add 6000 pass udp from fe80::/10 521 to ff02::9 521
|
|
|
|
$fwcmd add 65000 pass log all from any to any
|