Merge pull request firehol#373 from tycho/preserve-icmpv6-rules-in-op…

…timal-mode firehol: don't drop icmpv6 rules with FIREHOL_RULESET_MODE optimal
tgunr · Nov 5, 2018 · 825185b · 825185b
2 parents 193b3ed + 0215542
commit 825185b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sbin/firehol b/sbin/firehol
@@ -8028,7 +8028,7 @@ rule() {
 	# In FIREHOL_RULESET_MODE="optimal" (given as the parameter optimal=1) to us,
 	# we just create the state=NEW rules.
 	# We will work normaly though if a helper is required.
-	if [ ${optimal} -eq 1 -a "${table}" = "filter" -a -z "${helper[*]}" ]
+	if [ ${optimal} -eq 1 -a "${table}" = "filter" -a -z "${helper[*]}" -a "${proto[0]}" != "icmpv6" ]
 	then
 		if [[ "${state}" =~ 'NEW' ]]
 		then