Re: [OpenWrt-Devel] [PATCH] firewall3: Fix multicast ICMPv6 replies not being sent by default anymore.

2016-05-02 Thread Jo-Philipp Wich
Hi Vittorio, can you move the "mcdst" declaration to the top of the function? ~ Jo ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

[OpenWrt-Devel] [PATCH] firewall3: Fix multicast ICMPv6 replies not being sent by default anymore.

2016-05-01 Thread Vittorio Gambaletta (VittGam)
Since drop_invalid has been turned on by default, ICMPv6 echo requests to well-known multicast addresses, such as ff02::1, are not replied to by the router anymore, because conntrack considers those outgoing reply packets to be invalid. Fix this by not having the INVALID rule in the OUTPUT chain m