cubixle/packages
1
0
Fork 0
mirror of https://github.com/novatiq/packages.git synced 2026-04-30 15:38:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

yggdrasil: uci firewall Section name and cover both IP versions

Browse Source 
- rename the section instance to yggdrasil (feat. request)
- allow zone to cover both ip4 and ip6 fam

Signed-off-by: William Fleurant <meshnet@protonmail.com>
This commit is contained in:
William Fleurant
2019-10-26 13:41:13 -04:00
parent e4aa95eb6d
commit 2baab77b77
2 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
net/yggdrasil/files/yggdrasil.defaults
+7 -8
View File
@@ -41,14 +41,13 @@ EOF
# create the firewall zone
uci -q batch <<-EOF >/dev/null
add firewall zone
set firewall.@zone[-1].name=yggdrasil
add_list firewall.@zone[-1].network=yggdrasil
set firewall.@zone[-1].input=REJECT
set firewall.@zone[-1].output=ACCEPT
set firewall.@zone[-1].forward=REJECT
set firewall.@zone[-1].conntrack=1
set firewall.@zone[-1].family=ipv6
set firewall.yggdrasil=zone
set firewall.yggdrasil.name=yggdrasil
add_list firewall.yggdrasil.network=yggdrasil
set firewall.yggdrasil.input=REJECT
set firewall.yggdrasil.output=ACCEPT
set firewall.yggdrasil.forward=REJECT
set firewall.yggdrasil.conntrack=1
EOF
# allow ICMP from yggdrasil zone, e.g. ping6