diff options
| author | Franz Pletz <fpletz@fnordicwalking.de> | 2017-11-24 09:39:05 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-11-24 09:39:05 +0100 |
| commit | a59864c3c5b681a6630d977db6c0ea438fbb11a9 (patch) | |
| tree | c362c398310722bbeac42fd329ed23c8d41ee7ba /nixos/modules/services/networking | |
| parent | 162c92da08f281402adc256e3662b9a71a5df6d6 (diff) | |
| parent | 05761e9504a97d6ffa404508f83b91cc689a3f23 (diff) | |
| download | nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.tar nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.tar.gz nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.tar.bz2 nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.tar.lz nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.tar.xz nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.tar.zst nixlib-a59864c3c5b681a6630d977db6c0ea438fbb11a9.zip | |
Merge pull request #31839 from bluescreen303/fix-rpfilter
firewall: fix rpfilter blocking dhcp offers when no ip was bound yet
Diffstat (limited to 'nixos/modules/services/networking')
| -rw-r--r-- | nixos/modules/services/networking/firewall.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/firewall.nix b/nixos/modules/services/networking/firewall.nix index 9bd88ca1707b..bce48c8f65e5 100644 --- a/nixos/modules/services/networking/firewall.nix +++ b/nixos/modules/services/networking/firewall.nix @@ -125,6 +125,9 @@ let ip46tables -t raw -N nixos-fw-rpfilter 2> /dev/null || true ip46tables -t raw -A nixos-fw-rpfilter -m rpfilter ${optionalString (cfg.checkReversePath == "loose") "--loose"} -j RETURN + # Allows this host to act as a DHCP4 client without first having to use APIPA + iptables -t raw -A nixos-fw-rpfilter -p udp --sport 67 --dport 68 -j RETURN + # Allows this host to act as a DHCPv4 server iptables -t raw -A nixos-fw-rpfilter -s 0.0.0.0 -d 255.255.255.255 -p udp --sport 68 --dport 67 -j RETURN |