firewall: allow ICMPv6 type 129 (echo reply) - this fixes basic ICMPv6 in case no connection tracking is used

SVN-Revision: 30727
12 years ago · 9aaca7f1b1
parent 4dc4ebe0c8
commit 9aaca7f1b1
2 changed files with 3 additions and 1 deletions
--- a/package/firewall/Makefile
+++ b/package/firewall/Makefile
@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 PKG_NAME:=firewall

 PKG_VERSION:=2
-PKG_RELEASE:=46
+PKG_RELEASE:=47

 include $(INCLUDE_DIR)/package.mk

--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@ -64,6 +64,7 @@ config rule
 	option src		wan
 	option proto	icmp
 	list icmp_type		echo-request
+	list icmp_type		echo-reply
 	list icmp_type		destination-unreachable
 	list icmp_type		packet-too-big
 	list icmp_type		time-exceeded
@ -82,6 +83,7 @@ config rule
 	option dest		*
 	option proto		icmp
 	list icmp_type		echo-request
+	list icmp_type		echo-reply
 	list icmp_type		destination-unreachable
 	list icmp_type		packet-too-big
 	list icmp_type		time-exceeded