mwan3: Do not mangle outgoing ipv6 pings

Signed-off-by: Aaron Goodman <redacted>

diff --git a/net/mwan3/files/lib/mwan3/mwan3.sh b/net/mwan3/files/lib/mwan3/mwan3.sh
index ce3fc4e90619f2e4267f6c3395f96ebf417abd8f..e8044f76aa2ca46858623b23018bb43589a37785 100644 (file)
--- a/net/mwan3/files/lib/mwan3/mwan3.sh
+++ b/net/mwan3/files/lib/mwan3/mwan3.sh
@@ -240,7 +240,7 @@ mwan3_set_custom_ipset()
 
 mwan3_set_connected_iptables()
 {
-       local connected_network_v4 connected_network_v6
+       local connected_network_v4 connected_network_v6 source_network_v6
 
        $IPS -! create mwan3_connected_v4 hash:net
        $IPS create mwan3_connected_v4_temp hash:net
@@ -272,6 +272,14 @@ mwan3_set_connected_iptables()
        $IPS -! add mwan3_connected mwan3_connected_v4
        $IPS -! add mwan3_connected mwan3_connected_v6
 
+       $IPS -! create mwan3_source_v6 hash:net family inet6
+       $IPS create mwan3_source_v6_temp hash:net family inet6
+       for source_network_v6 in $($IP6 addr ls  | sed -ne 's/ *inet6 \([^ \/]*\).* scope global.*/\1/p'); do
+               $IPS -! add mwan3_source_v6_temp $source_network_v6
+       done
+       $IPS swap mwan3_source_v6_temp mwan3_source_v6
+       $IPS destroy mwan3_source_v6_temp
+
        $IPS -! create mwan3_dynamic_v4 hash:net
        $IPS -! add mwan3_connected mwan3_dynamic_v4
 
@@ -343,6 +351,12 @@ mwan3_set_general_iptables()
                                        -p ipv6-icmp \
                                        -m icmp6 --icmpv6-type 137 \
                                        -j RETURN
+                               # do not mangle outgoing echo request
+                               $IPT6 -A mwan3_hook \
+                                     -m set --match-set mwan3_source_v6 src \
+                                     -p ipv6-icmp -m icmp6 --icmpv6-type 128 \
+                                     -j RETURN
+
                        fi
                        $IPT -A mwan3_hook \
                                -j CONNMARK --restore-mark --nfmask $MMX_MASK --ctmask $MMX_MASK