Merge pull request #10366 from wfleurant/ygg-init-uci

yggdrasil: uci firewall Section name and cover both IP versions
This commit is contained in:
Hannu Nyman
2019-10-27 21:04:49 +02:00
committed by GitHub
2 changed files with 8 additions and 9 deletions
+1 -1
View File
@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=yggdrasil PKG_NAME:=yggdrasil
PKG_VERSION:=0.3.11 PKG_VERSION:=0.3.11
PKG_RELEASE:=1 PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://codeload.github.com/yggdrasil-network/yggdrasil-go/tar.gz/v$(PKG_VERSION)? PKG_SOURCE_URL:=https://codeload.github.com/yggdrasil-network/yggdrasil-go/tar.gz/v$(PKG_VERSION)?
+7 -8
View File
@@ -41,14 +41,13 @@ EOF
# create the firewall zone # create the firewall zone
uci -q batch <<-EOF >/dev/null uci -q batch <<-EOF >/dev/null
add firewall zone set firewall.yggdrasil=zone
set firewall.@zone[-1].name=yggdrasil set firewall.yggdrasil.name=yggdrasil
add_list firewall.@zone[-1].network=yggdrasil add_list firewall.yggdrasil.network=yggdrasil
set firewall.@zone[-1].input=REJECT set firewall.yggdrasil.input=REJECT
set firewall.@zone[-1].output=ACCEPT set firewall.yggdrasil.output=ACCEPT
set firewall.@zone[-1].forward=REJECT set firewall.yggdrasil.forward=REJECT
set firewall.@zone[-1].conntrack=1 set firewall.yggdrasil.conntrack=1
set firewall.@zone[-1].family=ipv6
EOF EOF
# allow ICMP from yggdrasil zone, e.g. ping6 # allow ICMP from yggdrasil zone, e.g. ping6