mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2024-11-27 17:13:11 +02:00
[package] firewall: allow redirecting only destination port (#7197)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@22227 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
parent
70f06b0258
commit
5fbf6ca9e6
@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
|
||||
PKG_NAME:=firewall
|
||||
|
||||
PKG_VERSION:=2
|
||||
PKG_RELEASE:=7
|
||||
PKG_RELEASE:=8
|
||||
|
||||
include $(INCLUDE_DIR)/package.mk
|
||||
|
||||
|
@ -26,8 +26,8 @@ fw_load_redirect() {
|
||||
|
||||
fw_callback pre redirect
|
||||
|
||||
[ -n "$redirect_src" -a -n "$redirect_dest_ip" ] || {
|
||||
fw_die "redirect ${redirect_name}: needs src and dest_ip"
|
||||
[ -n "$redirect_src" -a -n "$redirect_dest_ip$redirect_dest_port" ] || {
|
||||
fw_die "redirect ${redirect_name}: needs src and dest_ip or dest_port"
|
||||
}
|
||||
|
||||
list_contains FW_CONNTRACK_ZONES $redirect_src || \
|
||||
@ -53,6 +53,7 @@ fw_load_redirect() {
|
||||
--to-destination ${redirect_dest_ip}${redirect_dest_port:+:$nat_dest_port} \
|
||||
}
|
||||
|
||||
[ -n "$redirect_dest_ip" ] && \
|
||||
fw add $mode f zone_${redirect_src}_forward ACCEPT ^ { $redirect_src_ip $redirect_dest_ip } { \
|
||||
-d $redirect_dest_ip \
|
||||
${redirect_proto:+-p $redirect_proto} \
|
||||
|
Loading…
Reference in New Issue
Block a user