qi-hardware/openwrt-xburst
1
0
Fork 0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-11-27 17:55:55 +02:00
Code

[backfire] firewall: consider zones referenced by redirects as conntracked (#7196)

Browse Source 
git-svn-id: svn://svn.openwrt.org/openwrt/branches/backfire@22216 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
jow 2010-07-15 22:08:02 +00:00
parent 7c6904ccee
commit 5e99434568
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/firewall/Makefile
View File

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=firewall
PKG_VERSION:=1
PKG_RELEASE:=10
PKG_RELEASE:=11
include $(INCLUDE_DIR)/package.mk

4
package/firewall/files/uci_firewall.sh
View File

@ -356,6 +356,9 @@ fw_redirect() {
[ -z "$src" -o -z "$dest_ip" ] && { \
echo "redirect needs src and dest_ip"; return ; }
find_item "$src" $CONNTRACK_ZONES || \
append CONNTRACK_ZONES "$src"
src_port_first=${src_port%-*}
src_port_last=${src_port#*-}
[ "$src_port_first" != "$src_port_last" ] && { \
@ -391,6 +394,7 @@ fw_redirect() {
${src_mac:+-m mac --mac-source $src_mac} \
-j ACCEPT
}
[ "$proto" == "tcpudp" -o -z "$proto" ] && {
proto=tcp
add_rule