mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-11 19:55:52 +02:00
firewall: initialize IFACE if it is empty
at first boot there is no IFACE set which result in iptables errors at boot. fixes #12767 Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
@@ -7,6 +7,9 @@ eval $(/usr/local/bin/readhash /var/ipfire/ppp/settings)
|
||||
eval $(/usr/local/bin/readhash /var/ipfire/ethernet/settings)
|
||||
eval $(/usr/local/bin/readhash /var/ipfire/optionsfw/settings)
|
||||
IFACE=`/bin/cat /var/ipfire/red/iface 2> /dev/null | /usr/bin/tr -d '\012'`
|
||||
if [ -z $IFACE]; then
|
||||
IFACE="red0"
|
||||
fi
|
||||
|
||||
if [ -f /var/ipfire/red/device ]; then
|
||||
DEVICE=`/bin/cat /var/ipfire/red/device 2> /dev/null | /usr/bin/tr -d '\012'`
|
||||
@@ -39,9 +42,6 @@ iptables_init() {
|
||||
iptables -P FORWARD DROP
|
||||
iptables -P OUTPUT ACCEPT
|
||||
|
||||
# Ensure the xt_geoip module is always loaded (#12767)
|
||||
modprobe xt_geoip
|
||||
|
||||
# Enable TRACE logging to syslog
|
||||
modprobe nf_log_ipv4
|
||||
sysctl -q -w net.netfilter.nf_log.2=nf_log_ipv4
|
||||
|
||||
Reference in New Issue
Block a user