On 08/11/2015 01:08 AM, Simon Hobson wrote: > Unless I'm missing something, packets to/from link local addresses won't be > routed - and so should never go past the first hop.
If that's the case -- makes sense, now that you mention, but worth a check -- then ACCEPT net:fe80::/10 $FW udp 546 should do the trick. Thanks! ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
