KumiSystems/openwrtv3
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

add firewall protection for wan_device in addition to wan_ifname (fixes #852)

Browse source 
SVN-Revision: 5136
This commit is contained in:
Felix Fietkau 2006-10-15 23:04:23 +00:00
parent 5ef8d0eae7
commit afd6539a65
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
package/iptables/files/firewall.init
View file

@ -8,6 +8,7 @@ start() {
scan_interfaces scan_interfaces
config_get WAN wan ifname config_get WAN wan ifname
config_get WANDEV wan device
config_get LAN lan ifname config_get LAN lan ifname
## CLEAR TABLES ## CLEAR TABLES
@ -25,6 +26,7 @@ start() {
iptables -N LAN_ACCEPT iptables -N LAN_ACCEPT
[ -z "$WAN" ] || iptables -A LAN_ACCEPT -i "$WAN" -j RETURN [ -z "$WAN" ] || iptables -A LAN_ACCEPT -i "$WAN" -j RETURN
[ -z "$WANDEV" -o "$WANDEV" = "$WAN" ] || iptables -A LAN_ACCEPT -i "$WANDEV" -j RETURN
iptables -A LAN_ACCEPT -j ACCEPT iptables -A LAN_ACCEPT -j ACCEPT
### INPUT ### INPUT