[FS#3248] Feature request: Add firewall functionaity to support dynamic IPv6 addressing

OpenWrt Bugs openwrt-bugs at lists.openwrt.org
Mon Jul 27 03:28:00 EDT 2020


THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#3248 - Feature request: Add firewall functionaity to support dynamic IPv6 addressing
User who did this - Jo-Philipp Wich (jow-)

----------
You can use a notation like `option dest_ip ::73cd:243d:7c20:937/::ffff:ffff:ffff:ffff` to match the last 64 bit (the host part) of an IPv6 address while ignoring any dynamic prefix portion.

This works for both ip6tables and the UCI firewall and should give sufficient abilities to create device-specific, prefix-agnostic rules assuming that the target devices uses any sort of stable IPv6 address assignment.
----------

More information can be found at the following URL:
https://bugs.openwrt.org/index.php?do=details&task_id=3248#comment8594

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.



More information about the openwrt-bugs mailing list