From ca5bf9e291d7ba8cbd6bd287cec22298809fba81 Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Sat, 4 Sep 2010 15:49:13 +0000 Subject: firewall: - handle NAT reflection in firewall hotplug, solves synchronizing issues on boot - introduce masq_src and masq_dest options to limit zone masq to specific ip ranges, supports multiple subnets and negation SVN-Revision: 22888 --- package/firewall/files/reflection.hotplug | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/firewall/files/reflection.hotplug') diff --git a/package/firewall/files/reflection.hotplug b/package/firewall/files/reflection.hotplug index af88fe0243..dc6780a720 100644 --- a/package/firewall/files/reflection.hotplug +++ b/package/firewall/files/reflection.hotplug @@ -2,7 +2,7 @@ . /etc/functions.sh -if [ "$ACTION" = "ifup" ] && [ "$INTERFACE" = "wan" ]; then +if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then local wanip=$(uci -P/var/state get network.wan.ipaddr) iptables -t nat -F nat_reflection_in 2>/dev/null || { -- cgit v1.2.3