summaryrefslogtreecommitdiff
path: root/pkg
diff options
context:
space:
mode:
Diffstat (limited to 'pkg')
-rwxr-xr-xpkg/linux/bitmask-root11
1 files changed, 11 insertions, 0 deletions
diff --git a/pkg/linux/bitmask-root b/pkg/linux/bitmask-root
index 1929b51b..a69250a1 100755
--- a/pkg/linux/bitmask-root
+++ b/pkg/linux/bitmask-root
@@ -809,6 +809,17 @@ def firewall_start(args):
ip4tables("--append", BITMASK_CHAIN, "-o",
default_device, "--jump", "REJECT")
+ # workaround for ipv6 servers being blocked and not falling back to ipv4.
+ # See #5693
+ ip6tables("--append", "OUTPUT", "--jump", "REJECT",
+ "-s", "::/0", "-d", "::/0",
+ "-p", "tcp",
+ "--reject-with", "icmp6-port-unreachable")
+ ip6tables("--append", "OUTPUT", "--jump", "REJECT",
+ "-s", "::/0", "-d", "::/0",
+ "-p", "udp",
+ "--reject-with", "icmp6-port-unreachable")
+
def firewall_stop():
"""