mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2024-11-10 14:55:00 +02:00
slight modification after disq's post
http://openwrt.org/forum/viewtopic.php?t=1227 git-svn-id: svn://svn.openwrt.org/openwrt/trunk@596 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
parent
64cf838fc2
commit
2f07c201cb
@ -24,11 +24,13 @@ fi
|
||||
# defaults
|
||||
|
||||
$IPT -t filter -A INPUT -p icmp -j ACCEPT
|
||||
$IPT -t filter -A INPUT -p 47 -j ACCEPT
|
||||
$IPT -t filter -A INPUT -p 47 -j ACCEPT # allow GRE
|
||||
$IPT -t filter -A INPUT -i $WAN -p tcp --syn --tcp-option \! 2 -j DROP
|
||||
$IPT -t filter -A INPUT -i $WAN -p tcp -j REJECT --reject-with tcp-reset
|
||||
$IPT -t filter -A INPUT -i $WAN -j REJECT --reject-with icmp-port-unreachable
|
||||
|
||||
$IPT -t filter -A FORWARD -i $WAN -m state --state NEW,INVALID -j DROP
|
||||
$IPT -t filter -A FORWARD -i br0 -o br0 -j ACCEPT
|
||||
$IPT -t filter -A FORWARD -i $WAN -m state --state NEW -j DROP
|
||||
$IPT -t filter -A FORWARD -o $WAN -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
|
||||
|
||||
$IPT -t nat -A POSTROUTING -o $WAN -j MASQUERADE
|
||||
|
Loading…
Reference in New Issue
Block a user