mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-28 11:43:25 +02:00
Forward firewall: commented out line in init.d/firewall that all Forward traffic from green is allowed and put it in rules.pl. Now rules.pl allows this traffic when firewall is set to Mode0 or Mode2
This commit is contained in:
committed by
Michael Tremer
parent
c0ec19967e
commit
fd10a52ca2
0
config/forwardfw/firewall-lib.pl
Normal file → Executable file
0
config/forwardfw/firewall-lib.pl
Normal file → Executable file
@@ -88,9 +88,11 @@ if($param eq 'flush'){
|
||||
&preparerules;
|
||||
if($MODE eq '0'){
|
||||
if ($fwdfwsettings{'POLICY'} eq 'MODE1'){
|
||||
system ("iptables -A $CHAIN -j DROP");
|
||||
#system ("iptables -A $CHAIN -j DROP");
|
||||
}elsif($fwdfwsettings{'POLICY'} eq 'MODE2'){
|
||||
system ("iptables -A $CHAIN -j ACCEPT");
|
||||
#system ("iptables -A $CHAIN -j ACCEPT");
|
||||
}elsif($fwdfwsettings{'POLICY'} eq 'MODE0' || $fwdfwsettings{'POLICY'} eq 'MODE2'){
|
||||
system ("iptables -A $CHAIN -m state --state NEW -j ACCEPT");
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user