openwrt-redmi-ax3000/package/network/config/firewall
Andy Chiang 4ad22d0342 firewall: config: add dest addr restrictions for DHCPv6 rules
Some ISPs may use a GUA or other non-LLA as the source addr for the DHCPv6 response, but the destination addr is always LLA (fe80::/10).
Therefore, adding a dest addr restriction improves security.
See https://forum.mikrotik.com/t/xfinity-comcast-dhcpv6-configuration-change/156031/10

Signed-off-by: Andy Chiang <AndyChiang_git@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/20562
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-10 15:23:16 +01:00
..
files firewall: config: add dest addr restrictions for DHCPv6 rules 2025-11-10 15:23:16 +01:00
Makefile firewall: config: add dest addr restrictions for DHCPv6 rules 2025-11-10 15:23:16 +01:00