summaryrefslogtreecommitdiff
path: root/meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in
diff options
context:
space:
mode:
authorWilliam A. Kennington III <wak@google.com>2021-02-17 01:16:47 +0300
committerWilliam A. Kennington III <wak@google.com>2021-02-17 22:00:50 +0300
commitf19a8381cec954bc1e0e440e2e60c9ea3c58d324 (patch)
tree880e83f2f93fd1d5c9506906bc161cc3cc626f62 /meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in
parentc0263ac8ac029de5e7651a22cc864c4b3aaea5c3 (diff)
downloadopenbmc-f19a8381cec954bc1e0e440e2e60c9ea3c58d324.tar.xz
meta-google: gbmc-ncsi-config: Rename from ncsid-config
Make it clear this is a gbmc style configuration, similar to gbmc-systemd-config or gbmc-iperf3. Change-Id: Icd9a2f45f5b399ecb3f8ab1a63d1f0344342ab3a Signed-off-by: William A. Kennington III <wak@google.com>
Diffstat (limited to 'meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in')
-rw-r--r--meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in14
1 files changed, 14 insertions, 0 deletions
diff --git a/meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in b/meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in
new file mode 100644
index 000000000..33031f0db
--- /dev/null
+++ b/meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in
@@ -0,0 +1,14 @@
+table inet filter {
+ chain ncsi_input {
+ type filter hook input priority 0; policy drop;
+ iifname != @NCSI_IF@ accept
+ ct state established accept
+ tcp dport 3959 accept
+ udp dport 3959 accept
+ tcp dport 3967 accept
+ udp dport 3967 accept
+ icmpv6 type nd-neighbor-advert accept
+ icmpv6 type nd-neighbor-solicit accept
+ icmpv6 type nd-router-advert accept
+ }
+}