X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/fb7845a892c48e5004dea115bdd6b8a17fea7935..37024968756988bf2ba4277a9b8040294cc2a81a:/bookends.m4 diff --git a/bookends.m4 b/bookends.m4 index f451c8d..9757a38 100644 --- a/bookends.m4 +++ b/bookends.m4 @@ -108,11 +108,17 @@ m4_divert(32)m4_dnl ## Set forwarding options. Apparently setting ip_forward clobbers other ## settings, so put this first. case $host_type_<::>FWHOST in - router) forward=1 ;; - *) forward=0 ;; + router) forward=1 host=0 ;; + server) forward=0 host=0 ;; + client) forward=0 host=1 ;; esac setopt ip_forward $forward setdevopt forwarding $forward +for i in \ + accept_ra accept_ra_defrtr accept_ra_pinfo accept_ra_info_max_plen +do + setdevopt $i $host +done case $forward in 0) inchains="INPUT" ;; 1) inchains="INPUT FORWARD" ;;