diff options
| author | Jo-Philipp Wich <jow@openwrt.org> | 2011-10-22 20:11:25 +0000 |
|---|---|---|
| committer | Jo-Philipp Wich <jow@openwrt.org> | 2011-10-22 20:11:25 +0000 |
| commit | 9a61d9e513c5bfeff76bca1cd87a3f8651f4512b (patch) | |
| tree | f498bd9453ca52147bd6fbdfd1d6d03c564f293d /package/firewall/files/lib | |
| parent | e0e73928da09c2fcc075fa1da22179468ef311f2 (diff) | |
| download | mtk-20170518-9a61d9e513c5bfeff76bca1cd87a3f8651f4512b.zip mtk-20170518-9a61d9e513c5bfeff76bca1cd87a3f8651f4512b.tar.gz mtk-20170518-9a61d9e513c5bfeff76bca1cd87a3f8651f4512b.tar.bz2 | |
firewall: fix possible expansion of "*" when rules with "option src *" are processed
SVN-Revision: 28527
Diffstat (limited to 'package/firewall/files/lib')
| -rw-r--r-- | package/firewall/files/lib/fw.sh | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/package/firewall/files/lib/fw.sh b/package/firewall/files/lib/fw.sh index bf7156e..a8a7911 100644 --- a/package/firewall/files/lib/fw.sh +++ b/package/firewall/files/lib/fw.sh @@ -211,12 +211,17 @@ fw_get_family_mode() { local _mode="$4" local _ipv4 _ipv6 - [ -n "$FW_ZONES4$FW_ZONES6" ] && { - list_contains FW_ZONES4 $_zone && _ipv4=1 || _ipv4=0 - list_contains FW_ZONES6 $_zone && _ipv6=1 || _ipv6=0 + [ "$_zone" != "*" ] && { + [ -n "$FW_ZONES4$FW_ZONES6" ] && { + list_contains FW_ZONES4 "$_zone" && _ipv4=1 || _ipv4=0 + list_contains FW_ZONES6 "$_zone" && _ipv6=1 || _ipv6=0 + } || { + _ipv4=$(uci_get_state firewall core "${_zone}_ipv4" 0) + _ipv6=$(uci_get_state firewall core "${_zone}_ipv6" 0) + } } || { - _ipv4=$(uci_get_state firewall core ${_zone}_ipv4 0) - _ipv6=$(uci_get_state firewall core ${_zone}_ipv6 0) + _ipv4=1 + _ipv6=1 } case "$_hint:$_ipv4:$_ipv6" in |