diff options
| author | Jo-Philipp Wich <jow@openwrt.org> | 2013-11-18 11:59:27 +0000 |
|---|---|---|
| committer | Jo-Philipp Wich <jow@openwrt.org> | 2013-11-18 11:59:27 +0000 |
| commit | bc9043cc531a7fbb67a68ee0fd6d57e28b395edc (patch) | |
| tree | eb695c9d3c1805402df7d3d826535df29d502562 /target | |
| parent | 82e624279818643f58b92a88277f6a9eb1fd7ed0 (diff) | |
| download | master-31e0f0ae-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.gz master-31e0f0ae-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.bz2 master-31e0f0ae-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.zip | |
firewall: optimize DNAT rules and skip invalid rules and redirects (#14485)
- instead of writing one (or more) ACCEPT rules in the filter table
for each redirect install a global ctstate DNAT accept rule per zone
- discard rules and redirects which have invalid options set instead
of silently skipping the invalid values
SVN-Revision: 38849
Diffstat (limited to 'target')
0 files changed, 0 insertions, 0 deletions