From dbcddabcdf7e4a64e5addfee27621d0c66c333d6 Mon Sep 17 00:00:00 2001
From: smos <seth.mos@dds.nl>
Date: Mon, 2 Apr 2012 12:58:29 +0200
Subject: [PATCH] Adjust the DHCP6 client firewall rules

---
 etc/inc/filter.inc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index eb309d036c..473fd64540 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2491,7 +2491,8 @@ EOD;
 			$ipfrules .= <<<EOD
 
 # allow our DHCPv6 client out to the {$oc['descr']}
-pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client out {$oc['descr']}"
+pass in on \${$oc['descr']} proto udp from fe80::/10 port = 546 to fe80::/10 port = 546 label "allow dhcpv6 client in {$oc['descr']}"
+pass in on \${$oc['descr']} proto udp from any port = 547 to any port = 546 label "allow dhcpv6 client in {$oc['descr']}"
 pass out on \${$oc['descr']} proto udp from any port = 546 to any port = 547 label "allow dhcpv6 client out {$oc['descr']}"
 
 EOD;