ds-lite: disable NAT according to RFC 7084

[openwrt/openwrt.git] / package / network / ipv6 / ds-lite / files / dslite.sh

diff --git a/package/network/ipv6/ds-lite/files/dslite.sh b/package/network/ipv6/ds-lite/files/dslite.sh
index 670f93cd6ec12e2197d86aae218ce8c9aa415d20..a526c91d31b14e2ee7dc321dc7f36c16c4fc4870 100755 (executable)
--- a/package/network/ipv6/ds-lite/files/dslite.sh
+++ b/package/network/ipv6/ds-lite/files/dslite.sh
@@ -56,6 +56,13 @@ proto_dslite_setup() {
 
        proto_add_data
        [ -n "$zone" ] && json_add_string zone "$zone"
+
+       json_add_array firewall
+         json_add_object ""
+           json_add_string type nat
+           json_add_string target ACCEPT
+         json_close_object
+       json_close_array
        proto_close_data
 
        proto_send_update "$cfg"