1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-16 22:50:10 +03:00

F #4159: allow ipv6 135, 136 udp ports

Patch by Roy Keene <rkeene@knightpoint.com> from:

https://dev.opennebula.org/issues/4159#note-12
This commit is contained in:
Javi Fontan 2017-05-16 12:57:07 +02:00
parent 7edd06758c
commit 6b0814ef78

View File

@ -388,6 +388,10 @@ module SGIPTables
commands.add :ip6tables, "-A #{chain_in} -p icmpv6 --icmpv6-type 135 "\
"-j ACCEPT"
## Allow neighbor solicitations replies to reach the host
commands.add :ip6tables, "-A #{chain_in} -p icmpv6 --icmpv6-type 136 "\
"-j ACCEPT"
## Allow routers to send Redirect messages
commands.add :ip6tables, "-A #{chain_in} -p icmpv6 --icmpv6-type 137 "\
"-j ACCEPT"
@ -396,6 +400,10 @@ module SGIPTables
commands.add :ip6tables, "-A #{chain_out} -p icmpv6 --icmpv6-type 133 "\
"-j ACCEPT"
## Allow the host to send neighbor solicitation requests
commands.add :ip6tables, "-A #{chain_out} -p icmpv6 --icmpv6-type 135 "\
"-j ACCEPT"
## Allow the host to send neighbor solicitation replies
commands.add :ip6tables, "-A #{chain_out} -p icmpv6 --icmpv6-type 136 "\
"-j ACCEPT"