mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2024-08-19 23:10:14 +03:00
add firewall protection for wan_device in addition to wan_ifname (fixes #852)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@5136 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
parent
1764da6cc8
commit
b7c53bf001
@ -8,6 +8,7 @@ start() {
|
|||||||
scan_interfaces
|
scan_interfaces
|
||||||
|
|
||||||
config_get WAN wan ifname
|
config_get WAN wan ifname
|
||||||
|
config_get WANDEV wan device
|
||||||
config_get LAN lan ifname
|
config_get LAN lan ifname
|
||||||
|
|
||||||
## CLEAR TABLES
|
## CLEAR TABLES
|
||||||
@ -25,6 +26,7 @@ start() {
|
|||||||
|
|
||||||
iptables -N LAN_ACCEPT
|
iptables -N LAN_ACCEPT
|
||||||
[ -z "$WAN" ] || iptables -A LAN_ACCEPT -i "$WAN" -j RETURN
|
[ -z "$WAN" ] || iptables -A LAN_ACCEPT -i "$WAN" -j RETURN
|
||||||
|
[ -z "$WANDEV" -o "$WANDEV" = "$WAN" ] || iptables -A LAN_ACCEPT -i "$WANDEV" -j RETURN
|
||||||
iptables -A LAN_ACCEPT -j ACCEPT
|
iptables -A LAN_ACCEPT -j ACCEPT
|
||||||
|
|
||||||
### INPUT
|
### INPUT
|
||||||
|
Loading…
Reference in New Issue
Block a user