mirror of
https://github.com/openwrt/openwrt.git
synced 2024-11-24 10:25:51 +08:00
add firewall protection for wan_device in addition to wan_ifname (fixes #852)
SVN-Revision: 5136
This commit is contained in:
parent
5ef8d0eae7
commit
afd6539a65
@ -8,6 +8,7 @@ start() {
|
||||
scan_interfaces
|
||||
|
||||
config_get WAN wan ifname
|
||||
config_get WANDEV wan device
|
||||
config_get LAN lan ifname
|
||||
|
||||
## CLEAR TABLES
|
||||
@ -25,6 +26,7 @@ start() {
|
||||
|
||||
iptables -N LAN_ACCEPT
|
||||
[ -z "$WAN" ] || iptables -A LAN_ACCEPT -i "$WAN" -j RETURN
|
||||
[ -z "$WANDEV" -o "$WANDEV" = "$WAN" ] || iptables -A LAN_ACCEPT -i "$WANDEV" -j RETURN
|
||||
iptables -A LAN_ACCEPT -j ACCEPT
|
||||
|
||||
### INPUT
|
||||
|
Loading…
Reference in New Issue
Block a user