Browse Source

nftables: Allow respondd replies to yanic

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 3 years ago
parent
commit
04a882fb54
1 changed files with 4 additions and 0 deletions
  1. 4 0
      _modules/ffho_netfilter.py

+ 4 - 0
_modules/ffho_netfilter.py

@@ -141,6 +141,10 @@ def generate_service_rules (fw_config, node_config):
 	if 'batman' in roles:
 		rules[6].append ('ip6 saddr fe80::/64 ip6 daddr ff05::2:1001 udp dport 1001 counter accept comment "responnd"')
 
+	# Allow respondd replies to yanic
+	if 'yanic' in roles:
+		rules[6].append ('ip6 saddr fe80::/64 udp sport 1001 counter accept comment "respondd replies to yanic"')
+
 	for af in [ 4, 6 ]:
 		comment = "Generated rules" if rules[af] else "No generated rules"
 		rules[af].insert (0, "# %s" % comment)