5
0
mirror of git://git.proxmox.com/git/pve-firewall.git synced 2025-01-09 01:18:04 +03:00

fix wrong icmpv6 types

This removes icmpv6-type 'any' as it is not supported by ip6tables. Also
introduced new icmpv6 types 'beyond-scope', 'failed-policy' and
'reject-route'. These values were taken from 'ip6tables -p icmpv6 -h'.

Signed-off-by: Mira Limbeck <m.limbeck@proxmox.com>
This commit is contained in:
Mira Limbeck 2020-04-29 15:45:24 +02:00 committed by Thomas Lamprecht
parent be99c6a0e9
commit d676aa18e2

View File

@ -785,12 +785,14 @@ my $icmp_type_names = {
# ip6tables -p icmpv6 -h
my $icmpv6_type_names = {
'any' => 1,
'destination-unreachable' => 1,
'no-route' => 1,
'communication-prohibited' => 1,
'beyond-scope' => 1,
'address-unreachable' => 1,
'port-unreachable' => 1,
'failed-policy' => 1,
'reject-route' => 1,
'packet-too-big' => 1,
'time-exceeded' => 1,
'ttl-zero-during-transit' => 1,