mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2024-12-25 00:13:54 +02:00
adds more sanity checks to uci firewall
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12392 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
parent
6a94232068
commit
60197a65d9
@ -181,6 +181,8 @@ fw_rule() {
|
||||
[ -n "$dest" ] && TARGET=zone_${dest}_$target || TARGET=$target
|
||||
[ -n "$dest_port" -a -z "$proto" ] && { \
|
||||
echo "dport may only be used it proto is defined"; return; }
|
||||
[ -n "$src_port" -a -z "$proto" ] && { \
|
||||
echo "sport may only be used it proto is defined"; return; }
|
||||
$IPTABLES -I $ZONE 1 \
|
||||
${proto:+-p $proto} \
|
||||
${src_ip:+-s $src_ip} \
|
||||
@ -225,6 +227,8 @@ fw_redirect() {
|
||||
echo "redirect needs src and dest_ip"; return ; }
|
||||
[ -n "$dest_port" -a -z "$proto" ] && { \
|
||||
echo "dport may only be used it proto is defined"; return; }
|
||||
[ -n "$src_port" -a -z "$proto" ] && { \
|
||||
echo "sport may only be used it proto is defined"; return; }
|
||||
$IPTABLES -A zone_${src}_prerouting -t nat \
|
||||
${proto:+-p $proto} \
|
||||
${src_ip:+-s $src_ip} \
|
||||
|
Loading…
Reference in New Issue
Block a user