summaryrefslogtreecommitdiff
path: root/package/firewall/files/lib/core_forwarding.sh
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2010-05-19 21:35:23 +0000
committerJo-Philipp Wich <jow@openwrt.org>2010-05-19 21:35:23 +0000
commit40ad9defcc545c2925f6c37d17a64707f17f5b78 (patch)
tree30dfbe4ad35e8594aab3ca73b13609df025bf80e /package/firewall/files/lib/core_forwarding.sh
parent359f611957e3dbb75dd1a27a7ceaed76ee435f3a (diff)
downloadmtk-20170518-40ad9defcc545c2925f6c37d17a64707f17f5b78.zip
mtk-20170518-40ad9defcc545c2925f6c37d17a64707f17f5b78.tar.gz
mtk-20170518-40ad9defcc545c2925f6c37d17a64707f17f5b78.tar.bz2
firewall: - fix ip6tables rules when icmp_type option is set - add "family" option to zones, forwardings, redirects and rules to selectively apply rules to iptables and/or ip6tables
SVN-Revision: 21508
Diffstat (limited to 'package/firewall/files/lib/core_forwarding.sh')
-rw-r--r--package/firewall/files/lib/core_forwarding.sh5
1 files changed, 4 insertions, 1 deletions
diff --git a/package/firewall/files/lib/core_forwarding.sh b/package/firewall/files/lib/core_forwarding.sh
index 766e48e..689e262 100644
--- a/package/firewall/files/lib/core_forwarding.sh
+++ b/package/firewall/files/lib/core_forwarding.sh
@@ -7,6 +7,7 @@ fw_config_get_forwarding() {
string name "" \
string src "" \
string dest "" \
+ string family "" \
} || return
[ -n "$forwarding_name" ] || forwarding_name=$forwarding__name
}
@@ -26,7 +27,9 @@ fw_load_forwarding() {
target=zone_${forwarding_dest}_ACCEPT
}
- fw add i f $chain $target ^
+ local mode=$(fw_get_family_mode ${forwarding_family:-x} ${forwarding_dest:-${forwarding_src:--}} i)
+
+ fw add $mode f $chain $target ^
# propagate masq zone flag
[ -n "$forwarding_src" ] && list_contains CONNTRACK_ZONES $forwarding_src && {