Hello Matti,
thanks, I very much support this patch.
One little thing:
proto_add_ipv6_route "::0" 0 "$gateway_6"
should be
proto_add_ipv6_route "::0" 0 "$gateway_6" "" "" "${ip_6}/${ip_prefix_length}"
otherwise this might break IPv6 connectivity in the presence of other
IPv6 connections. In general for IPv6 routes must be source-restricted
to the prefixes and addresses that the ISP delegated, otherwise it might
happen that the routers tries to route traffic with source-addresses
from a different ISP through this connection and the ISP might drop the traffic
due to the source-addressing being "spoofed" essentially creating a blackhole.
Cheers,
Steven
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
