summaryrefslogtreecommitdiff
path: root/files/etc/uci-defaults/70_fill-dhcp-checksum
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc/uci-defaults/70_fill-dhcp-checksum')
-rw-r--r--files/etc/uci-defaults/70_fill-dhcp-checksum11
1 files changed, 11 insertions, 0 deletions
diff --git a/files/etc/uci-defaults/70_fill-dhcp-checksum b/files/etc/uci-defaults/70_fill-dhcp-checksum
new file mode 100644
index 0000000..6e9224a
--- /dev/null
+++ b/files/etc/uci-defaults/70_fill-dhcp-checksum
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+cat >> /etc/firewall.user << EOF
+
+# Fill DHCP checksums, try to work-around broken DHCP clients (such as FreeBSD).
+# It requires iptables-mod-checksum which is installed by default in lxd-openwrt.
+if [ -e /usr/lib/iptables/libxt_CHECKSUM.so ]; then
+ iptables -t mangle -A OUTPUT -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
+fi
+
+EOF