diff options
| author | Jo-Philipp Wich <jow@openwrt.org> | 2013-11-18 11:59:27 +0000 |
|---|---|---|
| committer | Jo-Philipp Wich <jow@openwrt.org> | 2013-11-18 11:59:27 +0000 |
| commit | bc9043cc531a7fbb67a68ee0fd6d57e28b395edc (patch) | |
| tree | eb695c9d3c1805402df7d3d826535df29d502562 | |
| parent | 82e624279818643f58b92a88277f6a9eb1fd7ed0 (diff) | |
| download | mtk-20170518-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.zip mtk-20170518-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.gz mtk-20170518-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.bz2 | |
firewall: optimize DNAT rules and skip invalid rules and redirects (#14485)
- instead of writing one (or more) ACCEPT rules in the filter table
for each redirect install a global ctstate DNAT accept rule per zone
- discard rules and redirects which have invalid options set instead
of silently skipping the invalid values
SVN-Revision: 38849
| -rw-r--r-- | package/network/config/firewall/Makefile | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/network/config/firewall/Makefile b/package/network/config/firewall/Makefile index ac4d16a..cde3aa8 100644 --- a/package/network/config/firewall/Makefile +++ b/package/network/config/firewall/Makefile @@ -8,13 +8,13 @@ include $(TOPDIR)/rules.mk PKG_NAME:=firewall -PKG_VERSION:=2013-10-23 +PKG_VERSION:=2013-11-18 PKG_RELEASE:=$(PKG_SOURCE_VERSION) PKG_SOURCE_PROTO:=git PKG_SOURCE_URL:=git://nbd.name/firewall3.git PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION) -PKG_SOURCE_VERSION:=c25922c05ae594c4c35fa65f27fd21c3a033f4ec +PKG_SOURCE_VERSION:=fa3386a7054aa9541decd68c8cf8de1e0d6f8832 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org> |