dch-gw: Allow outbound DHCP

Connection Tracking does not work for DHCP messages, since many are
broadcast. As such, the firewall must explicitly allow datagrams
destined for the DHCP client port.
This commit is contained in:
2018-04-07 09:39:22 -05:00
parent de5aa114d1
commit ef2b31880b

View File

@@ -100,6 +100,8 @@ allow_outgoing:
port: dhcpv6-server
- protocol: udp
port: bootps
- protocol: udp
port: bootpc
- protocol: tcp
port: https
- protocol: tcp