fixed: tweak rule for allowing DHCPv6 client requests

arno-iptables-firewall / aif

GNU General Public License v2.0

151 stars 24 forks source link

fixed: tweak rule for allowing DHCPv6 client requests #87

Closed abelbeck closed 1 year ago

abelbeck commented 1 year ago

In 2022, Comcast/Xfinity made a change where a 'dhcp6 reply' source address is global (GUA) not the expected link-local (LLA) source address. The destination address is link-local, so match the destination address for link-local instead of the source address.

Thanks to David Kerr @dkerr64 for the report.

abelbeck commented 1 year ago

@arnova : Merge if you approve. This was discovered and fixed in AstLinux https://github.com/astlinux-project/astlinux/commit/cdb1f51e013e7c1fb8e47b718922fce2a7702c34

arnova commented 1 year ago

Looks good, thanks!