summaryrefslogtreecommitdiff
path: root/pkg/linux/bitmask-root
diff options
context:
space:
mode:
authorTomás Touceda <chiiph@leap.se>2014-05-21 10:45:35 -0300
committerTomás Touceda <chiiph@leap.se>2014-05-21 10:45:35 -0300
commit4404db408ef8175f1004dce37e622ee0f410ab98 (patch)
tree6b780434aefe9aaf73dd1c0ae48182dc782c8fa0 /pkg/linux/bitmask-root
parent415b6e1f58e41ba0b66c24b6a1e93aca039a5e9f (diff)
parent7360aa6241607825117b81b32cbd122bdce67beb (diff)
Merge remote-tracking branch 'refs/remotes/kali/bug/block-ipv6-workaround' into develop
Diffstat (limited to 'pkg/linux/bitmask-root')
-rwxr-xr-xpkg/linux/bitmask-root11
1 files changed, 11 insertions, 0 deletions
diff --git a/pkg/linux/bitmask-root b/pkg/linux/bitmask-root
index 6badeedd..6d296ecf 100755
--- a/pkg/linux/bitmask-root
+++ b/pkg/linux/bitmask-root
@@ -765,6 +765,17 @@ def firewall_start(args):
"--dport", "53", "--destination", allowed_dns,
"--jump", "ACCEPT")
+ # workaround for ipv6 servers being blocked and not falling back to ipv4.
+ # See #5693
+ ip6tables("--append", "OUTPUT", "--jump", "REJECT",
+ "-s", "::/0", "-d", "::/0",
+ "-p", "tcp",
+ "--reject-with", "icmp6-port-unreachable")
+ ip6tables("--append", "OUTPUT", "--jump", "REJECT",
+ "-s", "::/0", "-d", "::/0",
+ "-p", "udp",
+ "--reject-with", "icmp6-port-unreachable")
+
def firewall_stop():
"""