diff options
| author | Mike Baker <mbm@openwrt.org> | 2006-01-23 21:45:44 +0000 |
|---|---|---|
| committer | Mike Baker <mbm@openwrt.org> | 2006-01-23 21:45:44 +0000 |
| commit | 8db6bb41f54a99ed46af91b9ba3c67493d8486a2 (patch) | |
| tree | a2840dd7c0208aa0cc723d7c2bff382bd5f7ca7a /openwrt/package/base-files/default/etc | |
| parent | 7789c25b04e354081d90807406f07a48aabb5d37 (diff) | |
| download | mtk-20170518-8db6bb41f54a99ed46af91b9ba3c67493d8486a2.zip mtk-20170518-8db6bb41f54a99ed46af91b9ba3c67493d8486a2.tar.gz mtk-20170518-8db6bb41f54a99ed46af91b9ba3c67493d8486a2.tar.bz2 | |
revert bad firewall patch
SVN-Revision: 3042
Diffstat (limited to 'openwrt/package/base-files/default/etc')
| -rwxr-xr-x | openwrt/package/base-files/default/etc/init.d/S45firewall | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/openwrt/package/base-files/default/etc/init.d/S45firewall b/openwrt/package/base-files/default/etc/init.d/S45firewall index 0110cfc..8789fba 100755 --- a/openwrt/package/base-files/default/etc/init.d/S45firewall +++ b/openwrt/package/base-files/default/etc/init.d/S45firewall @@ -81,11 +81,8 @@ iptables -t nat -N postrouting_rule iptables -A FORWARD -j forwarding_rule # allow - # if there is bridge splitting this workaround works too - for iface in $LAN; do - iptables -A FORWARD -i $iface -o $iface -j ACCEPT - [ -z "$WAN" ] || iptables -A FORWARD -i $iface -o $WAN -j ACCEPT - done + iptables -A FORWARD -i br0 -o br0 -j ACCEPT + # reject (what to do with anything not allowed earlier) # uses the default -P DROP |