mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-25 18:32:57 +02:00
firewall: Add IRC to the conntrack helpers
This commit is contained in:
@@ -136,7 +136,7 @@ $(TARGET) :
|
||||
echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
|
||||
|
||||
# Add conntrack helper default settings
|
||||
for proto in AMANDA FTP PPTP SIP TFTP; do \
|
||||
for proto in AMANDA FTP IRC PPTP SIP TFTP; do \
|
||||
echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \
|
||||
done
|
||||
|
||||
|
||||
@@ -126,6 +126,13 @@ iptables_init() {
|
||||
iptables -t raw -A CONNTRACK -p udp --dport 69 -j CT --helper tftp
|
||||
fi
|
||||
|
||||
# IRC
|
||||
if [ "${CONNTRACK_IRC}" = "on" ]; then
|
||||
iptables -A CONNTRACK -m conntrack --ctstate RELATED \
|
||||
-m helper --helper irc -j ACCEPT
|
||||
iptables -t raw -A CONNTRACK -p tcp --dport 6667 -j CT --helper irc
|
||||
fi
|
||||
|
||||
# Amanda
|
||||
if [ "${CONNTRACK_AMANDA}" = "on" ]; then
|
||||
iptables -A CONNTRACK -m conntrack --ctstate RELATED \
|
||||
|
||||
Reference in New Issue
Block a user