meta-google: ncsid-config: Fixup recipe
The license was mistakenly set to closed and it was missing an included
rules file.
Google-Bug-Id: 179618497
Change-Id: I8b9b01f7b53f03e6caa079de36e096db1a875955
Signed-off-by: William A. Kennington III <wak@google.com>
diff --git a/meta-google/recipes-google/ncsi/files/50-ncsi.rules.in b/meta-google/recipes-google/ncsi/files/50-ncsi.rules.in
new file mode 100644
index 0000000..33031f0
--- /dev/null
+++ b/meta-google/recipes-google/ncsi/files/50-ncsi.rules.in
@@ -0,0 +1,14 @@
+table inet filter {
+ chain ncsi_input {
+ type filter hook input priority 0; policy drop;
+ iifname != @NCSI_IF@ accept
+ ct state established accept
+ tcp dport 3959 accept
+ udp dport 3959 accept
+ tcp dport 3967 accept
+ udp dport 3967 accept
+ icmpv6 type nd-neighbor-advert accept
+ icmpv6 type nd-neighbor-solicit accept
+ icmpv6 type nd-router-advert accept
+ }
+}