diff options
| author | opswill <will@nixops.org> | 2025-06-05 12:04:10 +0800 |
|---|---|---|
| committer | opswill <will@nixops.org> | 2025-06-05 12:25:21 +0800 |
| commit | bfdba4079b0a76a8c578277adae3f36add832b41 (patch) | |
| tree | 6d384cc0f8c239157a82db479e2d8ee5109d8693 /data | |
| parent | a711ceb80158a1dcdeecd1570ca705684d636327 (diff) | |
| download | vyos-1x-bfdba4079b0a76a8c578277adae3f36add832b41.tar.gz vyos-1x-bfdba4079b0a76a8c578277adae3f36add832b41.zip | |
T7523: firewall: Accepting invalid traffic for pppoe discovery and wol
Diffstat (limited to 'data')
| -rwxr-xr-x | data/templates/firewall/nftables.j2 | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables.j2 b/data/templates/firewall/nftables.j2 index f5cd801e4..bf051bb57 100755 --- a/data/templates/firewall/nftables.j2 +++ b/data/templates/firewall/nftables.j2 @@ -416,7 +416,9 @@ table bridge vyos_filter { ct state invalid ether type arp counter accept ct state invalid ether type 8021q counter accept ct state invalid ether type 8021ad counter accept + ct state invalid ether type 0x8863 counter accept ct state invalid ether type 0x8864 counter accept + ct state invalid ether type 0x0842 counter accept {% endif %} {% endif %} {% if global_options.state_policy is vyos_defined %} |