firewall: prevent ip6tables -t nat rules (#10265)

SVN-Revision: 28535
2011-10-23 12:25:57 +00:00 · 2011-10-23 12:25:57 +00:00 · 204bf6e5fe
commit 204bf6e5fe
parent 69df551be3
2 changed files with 3 additions and 2 deletions
--- a/package/firewall/Makefile
+++ b/package/firewall/Makefile
@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 PKG_NAME:=firewall

 PKG_VERSION:=2
-PKG_RELEASE:=38
+PKG_RELEASE:=39

 include $(INCLUDE_DIR)/package.mk

--- a/package/firewall/files/lib/fw.sh
+++ b/package/firewall/files/lib/fw.sh
@ -74,7 +74,8 @@ fw__exec() { # <action> <family> <table> <chain> <target> <position> { <rules> }
 			fw__rc $(($? & 1))
 			return
 		fi
-		fw__rc 0
+		[ "$app" != ip6tables ] || [ "$tab" != nat ]
+		fw__rc $?
 	}

 	fw__err() {