From 2c77afaa7b6efdd5230236a8fbd9e2a527753cc6 Mon Sep 17 00:00:00 2001 From: Steven Barth Date: Mon, 27 Jul 2015 11:47:56 +0000 Subject: firewall: comply with REC-22, REC-24 of RFC 6092 Signed-off-by: Steven Barth git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@46507 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- .../network/config/firewall/files/firewall.config | 23 +++++++++++----------- 1 file changed, 11 insertions(+), 12 deletions(-) (limited to 'package/network/config/firewall/files') diff --git a/package/network/config/firewall/files/firewall.config b/package/network/config/firewall/files/firewall.config index 1a20e39ca5..5d0e3cbc66 100644 --- a/package/network/config/firewall/files/firewall.config +++ b/package/network/config/firewall/files/firewall.config @@ -159,19 +159,18 @@ config include # option proto tcp # allow IPsec/ESP and ISAKMP passthrough -#config rule -# option src wan -# option dest lan -# option protocol esp -# option target ACCEPT +config rule + option src wan + option dest lan + option protocol esp + option target ACCEPT -#config rule -# option src wan -# option dest lan -# option src_port 500 -# option dest_port 500 -# option proto udp -# option target ACCEPT +config rule + option src wan + option dest lan + option dest_port 500 + option proto udp + option target ACCEPT ### FULL CONFIG SECTIONS #config rule -- cgit v1.2.3