mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2024-11-14 07:28:28 +02:00
don't drop all incoming connections if wan_ifname is not set
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@3709 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
parent
83446d19bc
commit
82c65f8798
@ -34,7 +34,7 @@ iptables -t nat -N postrouting_rule
|
|||||||
iptables -A INPUT -j input_rule
|
iptables -A INPUT -j input_rule
|
||||||
|
|
||||||
# allow
|
# allow
|
||||||
[ -z "$WAN" ] || iptables -A INPUT -i \! $WAN -j ACCEPT # allow from lan/wifi interfaces
|
iptables -A INPUT ${WAN:+-i \! $WAN} -j ACCEPT # allow from all interfaces except for wan
|
||||||
iptables -A INPUT -p icmp -j ACCEPT # allow ICMP
|
iptables -A INPUT -p icmp -j ACCEPT # allow ICMP
|
||||||
iptables -A INPUT -p gre -j ACCEPT # allow GRE
|
iptables -A INPUT -p gre -j ACCEPT # allow GRE
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user