Commit 5bc08141 authored by Thomas Gambier's avatar Thomas Gambier :bicyclist_tone2:
Browse files

firewalld: don't activate IPv6_rpfilter to be compatible with re6st

See https://firewalld.org/documentation/configuration/firewalld-conf.html#ipv6_rpfilter

When re6st is running with tunnels, the IPv6 packets can come in through
an interface and go out through another. This is expected.
parent fca360f9
No related merge requests found
Pipeline #28127 passed with stage
......@@ -128,6 +128,7 @@ command =
sed -i 's#DefaultZone=public#DefaultZone=trusted#' ${firewalld:etc-dir}/firewalld.conf
sed -i 's#FirewallBackend=nftables#FirewallBackend=iptables#' ${firewalld:etc-dir}/firewalld.conf
sed -i 's#IPv6_rpfilter=yes#IPv6_rpfilter=no#' ${firewalld:etc-dir}/firewalld.conf
sed -i "s#'/etc/firewalld'#'${firewalld:etc-dir}'#" ${firewalld:python-egg}/firewall/config/__init__.py
sed -i "s#'/usr/lib/firewalld'#'${firewalld:location}/lib/firewalld'#" ${firewalld:python-egg}/firewall/config/__init__.py
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment