Skip to content

firewall: Fix IPv6 traffic forwarding

Dominic Lake requested to merge bt/openwrt-core:feature/fix-ipv6-forwarding into devel

The /etc/firewall.protect_ports script has added the hub ports to the ip6tables forwarding chain which means that traffic to any LAN IPv6 host on those ports will also get the traffic.

Fix by moving the protectio rules to the input chain - i.e. only ACCEPT when going to the hub direcly.

Merge request reports