IPv6 default rule



  • Hello, a question to developers.

    Could you disable default IPv6 firewall rules, like:

    block drop in inet6 all label "Default deny rule IPv6"
    block drop out inet6 all label "Default deny rule IPv6"
    pass out quick inet6 proto ipv6-icmp from fe80::/10 to fe80::/10 icmp6-type echorep keep state
    pass in quick inet6 proto ipv6-icmp from fe80::/10 to fe80::/10 icmp6-type echoreq keep state
    pass quick inet6 proto ipv6-icmp all icmp6-type unreach keep state

    if IPv6 is disabled