aboutsummaryrefslogtreecommitdiffstats
path: root/testing/hosts/default/etc/ip6tables.rules
diff options
context:
space:
mode:
Diffstat (limited to 'testing/hosts/default/etc/ip6tables.rules')
-rw-r--r--testing/hosts/default/etc/ip6tables.rules4
1 files changed, 4 insertions, 0 deletions
diff --git a/testing/hosts/default/etc/ip6tables.rules b/testing/hosts/default/etc/ip6tables.rules
index f793cb10d..6a2c6af8e 100644
--- a/testing/hosts/default/etc/ip6tables.rules
+++ b/testing/hosts/default/etc/ip6tables.rules
@@ -28,6 +28,10 @@
-A INPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT
-A OUTPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT
+# allow crl and certficate fetch from winnetou
+-A INPUT -i eth0 -p tcp --sport 80 -s fec0::15 -j ACCEPT
+-A OUTPUT -o eth0 -p tcp --dport 80 -d fec0::15 -j ACCEPT
+
# log dropped packets
-A INPUT -j LOG --log-prefix " IN: "
-A OUTPUT -j LOG --log-prefix " OUT: "