diff options
| author | Jo-Philipp Wich <jow@openwrt.org> | 2013-02-04 14:38:33 +0000 |
|---|---|---|
| committer | Jo-Philipp Wich <jow@openwrt.org> | 2013-02-04 14:38:33 +0000 |
| commit | e106f25ee74804478470a075cf7181bd995b9c33 (patch) | |
| tree | d9160d4a882b4eae2cc6533f5ff0b5727942c450 /package/network/config/firewall/files/lib/core_forwarding.sh | |
| parent | 8506964e6d6f89ae67951d0eafe4717b63b1f610 (diff) | |
| download | upstream-e106f25ee74804478470a075cf7181bd995b9c33.tar.gz upstream-e106f25ee74804478470a075cf7181bd995b9c33.tar.bz2 upstream-e106f25ee74804478470a075cf7181bd995b9c33.zip | |
firewall: various enhancements
- reduce mssfix related log spam (#10681)
- separate src and dest terminal chains (#11453, #12945)
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
Diffstat (limited to 'package/network/config/firewall/files/lib/core_forwarding.sh')
| -rw-r--r-- | package/network/config/firewall/files/lib/core_forwarding.sh | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/network/config/firewall/files/lib/core_forwarding.sh b/package/network/config/firewall/files/lib/core_forwarding.sh index c4a968143d..2ea03f0eb7 100644 --- a/package/network/config/firewall/files/lib/core_forwarding.sh +++ b/package/network/config/firewall/files/lib/core_forwarding.sh @@ -17,14 +17,14 @@ fw_load_forwarding() { fw_callback pre forwarding - local chain=forward + local chain=delegate_forward [ -n "$forwarding_src" ] && { chain=zone_${forwarding_src}_forward } local target=ACCEPT [ -n "$forwarding_dest" ] && { - target=zone_${forwarding_dest}_ACCEPT + target=zone_${forwarding_dest}_dest_ACCEPT } local mode |