Changeset 28671
- Timestamp:
- 2011-10-29T20:09:25+02:00 (6 years ago)
- Location:
- branches/backfire/package/firewall
- Files:
-
- 4 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/backfire/package/firewall/Makefile
r28644 r28671 10 10 11 11 PKG_VERSION:=2 12 PKG_RELEASE:=34. 512 PKG_RELEASE:=34.6 13 13 14 14 include $(INCLUDE_DIR)/package.mk -
branches/backfire/package/firewall/files/lib/core.sh
r23080 r28671 68 68 INTERFACE="$n" DEVICE="$i" /sbin/hotplug-call firewall 69 69 done 70 71 config_get i core "${z}_tcpmss" 72 [ "$i" == 1 ] && { 73 fw del i m FORWARD zone_${z}_MSSFIX 74 fw del i m zone_${z}_MSSFIX 75 } 70 76 done 71 77 -
branches/backfire/package/firewall/files/lib/core_init.sh
r28644 r28671 196 196 fw add $mode f ${chain}_DROP 197 197 fw add $mode f ${chain}_REJECT 198 fw add $mode f ${chain}_MSSFIX199 198 200 199 # TODO: Rename to ${chain}_input … … 214 213 fw add $mode r ${chain}_notrack 215 214 216 [ $zone_mtu_fix == 1 ] && \ 217 fw add $mode f FORWARD ${chain}_MSSFIX ^ 215 [ $zone_mtu_fix == 1 ] && { 216 fw add $mode m ${chain}_MSSFIX 217 fw add $mode m FORWARD ${chain}_MSSFIX ^ 218 uci_set_state firewall core ${zone_name}_tcpmss 1 219 } 218 220 219 221 [ $zone_custom_chains == 1 ] && { … … 236 238 237 239 local t 238 for t in REJECT DROP MSSFIX; do240 for t in REJECT DROP; do 239 241 fw add $mode f ${chain}_${t} LOG ^ \ 240 { -m limit --limit $zone_log_limit --log-prefix "$t($zone_name): " 242 { -m limit --limit $zone_log_limit --log-prefix "$t($zone_name): " } 241 243 done 244 245 [ $zone_mtu_fix == 1 ] && \ 246 fw add $mode m ${chain}_MSSFIX LOG ^ \ 247 { -m limit --limit $zone_log_limit --log-prefix "MSSFIX($zone_name): " } 242 248 } 243 249 -
branches/backfire/package/firewall/files/lib/core_interface.sh
r27837 r28671 97 97 fw $action $mode f ${chain}_REJECT reject $ { -i "$ifname" $inet } 98 98 99 fw $action $mode f ${chain}_MSSFIX TCPMSS $ { -o "$ifname" -p tcp --tcp-flags SYN,RST SYN --clamp-mss-to-pmtu $onet } 99 [ "$(uci_get_state firewall core "${zone}_tcpmss")" == 1 ] && \ 100 fw $action $mode m ${chain}_MSSFIX TCPMSS $ \ 101 { -o "$ifname" -p tcp --tcp-flags SYN,RST SYN --clamp-mss-to-pmtu $onet } 100 102 101 103 fw $action $mode f input ${chain} $ { -i "$ifname" $inet }
Note: See TracChangeset
for help on using the changeset viewer.