mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
wirelessctrl: Fix evaluation of configuration settings.
This commit is contained in:
@@ -97,7 +97,7 @@ int main(void) {
|
||||
}
|
||||
|
||||
/* restrict blue access tp the proxy port */
|
||||
if (findkey(kv, "DROPPROXY", buffer) && strcmp(buffer,"off") == 0) {
|
||||
if (findkey(kv, "DROPPROXY", buffer) && strcmp(buffer, "on") == 0) {
|
||||
/* Read the proxy values */
|
||||
if (!readkeyvalues(kv, CONFIG_ROOT "/proxy/settings") || !(findkey(kv, "PROXY_PORT", buffer))) {
|
||||
fprintf(stderr, "Cannot read proxy settings\n");
|
||||
@@ -111,7 +111,7 @@ int main(void) {
|
||||
}
|
||||
|
||||
/* not allow blue to acces a samba server running on local fire*/
|
||||
if(findkey(kv, "DROPSAMBA", buffer) && strcmp(buffer,"off")){
|
||||
if (findkey(kv, "DROPSAMBA", buffer) && strcmp(buffer, "on") == 0) {
|
||||
snprintf(command, STRING_SIZE-1, "/sbin/iptables -A WIRELESSFORWARD -i %s -p tcp -m multiport --ports 135,137,138,139,445,1025 -j DROP -m comment --comment 'DROP_Wirelessforward'", blue_dev);
|
||||
safe_system(command);
|
||||
snprintf(command, STRING_SIZE-1, "/sbin/iptables -A WIRELESSINPUT -i %s -p tcp -m multiport --ports 135,137,138,139,445,1025 -j DROP -m comment --comment 'DROP_Wirelessinput'", blue_dev);
|
||||
@@ -157,13 +157,13 @@ int main(void) {
|
||||
}
|
||||
|
||||
/* with this rule you can disable the logging of the dropped wireless input packets*/
|
||||
if (!findkey(kv, "DROPWIRELESSINPUT", buffer) || strcmp(buffer,"off") == 0) {
|
||||
if (findkey(kv, "DROPWIRELESSINPUT", buffer) && strcmp(buffer, "on") == 0) {
|
||||
snprintf(command, STRING_SIZE-1, "/sbin/iptables -A WIRELESSINPUT -i %s -j LOG --log-prefix 'DROP_Wirelessinput'", blue_dev);
|
||||
safe_system(command);
|
||||
}
|
||||
|
||||
/* with this rule you can disable the logging of the dropped wireless forward packets*/
|
||||
if (!findkey(kv, "DROPWIRELESSFORWARD", buffer) || strcmp(buffer,"off") == 0) {
|
||||
if (findkey(kv, "DROPWIRELESSFORWARD", buffer) && strcmp(buffer, "on") == 0) {
|
||||
snprintf(command, STRING_SIZE-1, "/sbin/iptables -A WIRELESSFORWARD -i %s -j LOG --log-prefix 'DROP_Wirelessforward'", blue_dev);
|
||||
safe_system(command);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user