From b6249f1781efc4fefbdf87b661d53c0923ec7438 Mon Sep 17 00:00:00 2001 From: Florian Eckert Date: Wed, 23 May 2018 10:51:52 +0200 Subject: [PATCH] net/mwan3: fix NDP on ipv6 for ra services Signed-off-by: Florian Eckert --- net/mwan3/Makefile | 2 +- net/mwan3/files/lib/mwan3/mwan3.sh | 8 ++++++++ 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/net/mwan3/Makefile b/net/mwan3/Makefile index 83e514be7..adb54b24a 100644 --- a/net/mwan3/Makefile +++ b/net/mwan3/Makefile @@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=mwan3 -PKG_VERSION:=2.6.17 +PKG_VERSION:=2.6.18 PKG_RELEASE:=1 PKG_MAINTAINER:=Florian Eckert PKG_LICENSE:=GPLv2 diff --git a/net/mwan3/files/lib/mwan3/mwan3.sh b/net/mwan3/files/lib/mwan3/mwan3.sh index 74d5592eb..2c5bbf3c1 100644 --- a/net/mwan3/files/lib/mwan3/mwan3.sh +++ b/net/mwan3/files/lib/mwan3/mwan3.sh @@ -198,6 +198,14 @@ mwan3_set_general_iptables() if ! $IPT -S mwan3_hook &> /dev/null; then $IPT -N mwan3_hook + # do not mangle ipv6 ra service + if [ "$IPT" = "$IPT6" ]; then + $IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN + $IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN + $IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN + $IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN + $IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 137 -j RETURN + fi $IPT -A mwan3_hook -j CONNMARK --restore-mark --nfmask $MMX_MASK --ctmask $MMX_MASK $IPT -A mwan3_hook -m mark --mark 0x0/$MMX_MASK -j mwan3_ifaces_in $IPT -A mwan3_hook -m mark --mark 0x0/$MMX_MASK -j mwan3_connected