drop packet which has ::1 as src or dst via other than lo0

like as rc.firewall does. MFC after: 1 week
2004-05-24 07:27:26 +00:00 · 2004-05-24 07:27:26 +00:00 · f269dc02de
commit f269dc02de
parent 51e2355882
1 changed files with 2 additions and 0 deletions
--- a/etc/rc.firewall6
+++ b/etc/rc.firewall6
@ -55,6 +55,8 @@ setup_local () {
 	# Only in rare cases do you want to change these rules
 	#
 	${fw6cmd} add 100 pass all from any to any via lo0
+	${fw6cmd} add 200 deny all from any to ::1
+	${fw6cmd} add 300 deny all from ::1 to any
 	#
 	# ND
 	#