cpet
/
openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Lose the fe80::/10 IP restrictions from the sample pf.conf lines for 

DHCPv6-PD, it seems some satellite-based internet provider sends PD from
a routable address rather than the usual link-local.

Based on a diff from William Graeber but I tweaked a little (mainly removed
the src addr limit from the outbound rule and use "received-on none" instead,
so that the local machine can send from any address without allowing forwarded
packets).
This commit is contained in:
sthen 2023-01-18 19:15:39 +00:00
parent be57db213a
commit 209a2f8568
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
net/dhcpcd/Makefile
View File

@ -6,7 +6,7 @@ GH_ACCOUNT= NetworkConfiguration
GH_PROJECT= dhcpcd
GH_TAGNAME= dhcpcd-9.4.1
DISTNAME= ${GH_TAGNAME}
REVISION= 1
REVISION= 2
EPOCH= 0

7
net/dhcpcd/pkg/README
View File

@ -14,8 +14,11 @@ pppoe0 interface and assigning it to multiple local networks.
Also ensure that pf.conf(5) allows DHCPv6 traffic to pass, for example:
pass in quick on pppoe0 proto udp from fe80::/10 port dhcpv6-server to fe80::/10 port dhcpv6-client
pass out quick on pppoe0 proto udp from fe80::/10 port dhcpv6-client to ff02::1:2 port dhcpv6-server
pass out quick on pppoe0 proto udp from port dhcpv6-client \
to port dhcpv6-server received-on none
pass in quick on pppoe0 proto udp from port dhcpv6-server \
to fe80::/10 port dhcpv6-client
As usual with IPv6, you will also need to allow address resolution
(with IPv6 this is done "in band" using icmp6 packets which must be allowed