From 068af34ac2192703e005ec4dbeb8590b67c9034c Mon Sep 17 00:00:00 2001 From: Tom Mortensen Date: Fri, 14 Nov 2025 13:34:58 -0800 Subject: [PATCH] Fix: starting docker causes all IPv6 packets on br0 to be dropped --- etc/rc.d/rc.docker | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/etc/rc.d/rc.docker b/etc/rc.d/rc.docker index 90cec4c68..e9ac334d9 100755 --- a/etc/rc.d/rc.docker +++ b/etc/rc.d/rc.docker @@ -484,11 +484,11 @@ docker_network_start(){ fi fi done - # create IPv6 forward accept rule - if [[ $IPV6_FORWARD == accept ]]; then - ip6tables -P FORWARD ACCEPT - log "created forward accept rule for IPv6 network" - fi +# # create IPv6 forward accept rule +# if [[ $IPV6_FORWARD == accept ]]; then +# ip6tables -P FORWARD ACCEPT +# log "created forward accept rule for IPv6 network" +# fi log "Network started." } @@ -575,6 +575,9 @@ docker_service_start(){ fi nohup $UNSHARE --propagation slave -- $DOCKER -p $DOCKER_PIDFILE $DOCKER_OPTS >>$DOCKER_LOG 2>&1 & wait_daemon + # after docket started, continue to accept non-docker IPv6 traffic on br0 + ip6tables -P FORWARD ACCEPT +# log "created forward accept rule for IPv6 network" if docker_running; then REPLY="Started"; else REPLY="Failed"; fi fi log "$DAEMON... $REPLY."