Difuse/luci
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #5320 from systemcrash/firewall_ipv6_icmp

Browse source 
luci-app-firewall: add ipv6 exclusive ICMP types to firewall
This commit is contained in:
Jo-Philipp Wich 2021-08-31 23:55:00 +02:00 committed by GitHub
commit 3ac88f88ed
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
applications/luci-app-firewall/htdocs/luci-static/resources/view/firewall/rules.js
View file

@ -298,6 +298,8 @@ return view.extend({
o.value('', 'any'); o.value('', 'any');
o.value('address-mask-reply'); o.value('address-mask-reply');
o.value('address-mask-request'); o.value('address-mask-request');
o.value('address-unreachable'); /* ipv6 */
o.value('bad-header'); /* ipv6 */
o.value('communication-prohibited'); o.value('communication-prohibited');
o.value('destination-unreachable'); o.value('destination-unreachable');
o.value('echo-reply'); o.value('echo-reply');
@ -315,6 +317,7 @@ return view.extend({
o.value('network-redirect'); o.value('network-redirect');
o.value('network-unknown'); o.value('network-unknown');
o.value('network-unreachable'); o.value('network-unreachable');
o.value('no-route'); /* ipv6 */
o.value('packet-too-big'); o.value('packet-too-big');
o.value('parameter-problem'); o.value('parameter-problem');
o.value('port-unreachable'); o.value('port-unreachable');
@ -335,6 +338,8 @@ return view.extend({
o.value('TOS-network-unreachable'); o.value('TOS-network-unreachable');
o.value('ttl-zero-during-reassembly'); o.value('ttl-zero-during-reassembly');
o.value('ttl-zero-during-transit'); o.value('ttl-zero-during-transit');
o.value('unknown-header-type'); /* ipv6 */
o.value('unknown-option'); /* ipv6 */
o.depends({ proto: 'icmp', '!contains': true }); o.depends({ proto: 'icmp', '!contains': true });
o.depends({ proto: 'icmpv6', '!contains': true }); o.depends({ proto: 'icmpv6', '!contains': true });