firewall: add option to disable NAT reflection

SVN-Revision: 22908
14 years ago · f4ee14e1c3
parent baf4782be6
commit f4ee14e1c3
1 changed files with 4 additions and 0 deletions
--- a/package/firewall/files/reflection.hotplug
+++ b/package/firewall/files/reflection.hotplug
@ -53,6 +53,10 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
 				local proto
 				config_get proto "$cfg" proto

+				local reflection
+				config_get_bool reflection "$cfg" reflection 1
+				[ "$reflection" == 1 ] || return
+
 				local epmin epmax extport
 				config_get extport "$cfg" src_dport
 				[ -n "$extport" ] || return