diff options
author | Jo-Philipp Wich <jow@openwrt.org> | 2013-11-18 11:59:27 +0000 |
---|---|---|
committer | Jo-Philipp Wich <jow@openwrt.org> | 2013-11-18 11:59:27 +0000 |
commit | bc9043cc531a7fbb67a68ee0fd6d57e28b395edc (patch) | |
tree | eb695c9d3c1805402df7d3d826535df29d502562 /tools/ipkg-utils | |
parent | 82e624279818643f58b92a88277f6a9eb1fd7ed0 (diff) | |
download | upstream-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.gz upstream-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.bz2 upstream-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.zip |
firewall: optimize DNAT rules and skip invalid rules and redirects (#14485)
- instead of writing one (or more) ACCEPT rules in the filter table
for each redirect install a global ctstate DNAT accept rule per zone
- discard rules and redirects which have invalid options set instead
of silently skipping the invalid values
SVN-Revision: 38849
Diffstat (limited to 'tools/ipkg-utils')
0 files changed, 0 insertions, 0 deletions