firewall: also set up nat reflection rules for redirects with proto all and/or no src_dport set

SVN-Revision: 32652
master
Jo-Philipp Wich 13 years ago
parent 86de034767
commit 4127e73b84
  1. 2
      package/firewall/Makefile
  2. 3
      package/firewall/files/reflection.hotplug

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=firewall
PKG_VERSION:=2
PKG_RELEASE:=52
PKG_RELEASE:=53
include $(INCLUDE_DIR)/package.mk

@ -69,7 +69,7 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
config_get proto "$cfg" proto
local epmin epmax extport
config_get extport "$cfg" src_dport
config_get extport "$cfg" src_dport "1-65535"
[ -n "$extport" ] || return
epmin="${extport%[-:]*}"; epmax="${extport#*[-:]}"
@ -88,6 +88,7 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
config_get inthost "$cfg" dest_ip
[ -n "$inthost" ] || return
[ "$proto" = all ] && proto="tcp udp"
[ "$proto" = tcpudp ] && proto="tcp udp"
[ "${inthost#!}" = "$inthost" ] || return 0

Loading…
Cancel
Save