commit 64e0ef59316731f8a996c81ea5c20f73ef368088
parent 78d223a839071fa35236194112e58a5cf5489c02
Author: Daniel Barlow <dan@telent.net>
Date: Tue, 27 Jun 2023 21:25:30 +0100
use numeric proto number (tautology...) for HIP
Diffstat:
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/examples/rotuer-firewall.nix b/examples/rotuer-firewall.nix
@@ -70,7 +70,7 @@ let
# does this ever get used or does the preceding general udp accept
# already grab anything that might get here?
(accept "oifname \"ppp0\" udp dport 500") # IKE Protocol [RFC5996]. haha zyxel
- (accept "ip6 nexthdr hip")
+ (accept "ip6 nexthdr 139") # Host Identity Protocol
## FIXME no support yet for recs 27-30 Mobility Header