mirror of https://github.com/hak5/openwrt.git
firewall: add icmp_type option to specify the icmp type in rule sections, bump pkg revision (#5554)
SVN-Revision: 17115lede-17.01
parent
ad4d3c72dd
commit
187e2ba9fc
|
@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
|
||||||
PKG_NAME:=firewall
|
PKG_NAME:=firewall
|
||||||
|
|
||||||
PKG_VERSION:=1
|
PKG_VERSION:=1
|
||||||
PKG_RELEASE:=3
|
PKG_RELEASE:=4
|
||||||
|
|
||||||
include $(INCLUDE_DIR)/package.mk
|
include $(INCLUDE_DIR)/package.mk
|
||||||
|
|
||||||
|
|
|
@ -243,6 +243,7 @@ fw_rule() {
|
||||||
local dest_ip
|
local dest_ip
|
||||||
local dest_port
|
local dest_port
|
||||||
local proto
|
local proto
|
||||||
|
local icmp_type
|
||||||
local target
|
local target
|
||||||
local ruleset
|
local ruleset
|
||||||
|
|
||||||
|
@ -254,6 +255,7 @@ fw_rule() {
|
||||||
config_get dest_ip $1 dest_ip
|
config_get dest_ip $1 dest_ip
|
||||||
config_get dest_port $1 dest_port
|
config_get dest_port $1 dest_port
|
||||||
config_get proto $1 proto
|
config_get proto $1 proto
|
||||||
|
config_get icmp_type $1 icmp_type
|
||||||
config_get target $1 target
|
config_get target $1 target
|
||||||
config_get ruleset $1 ruleset
|
config_get ruleset $1 ruleset
|
||||||
|
|
||||||
|
@ -276,6 +278,7 @@ fw_rule() {
|
||||||
add_rule() {
|
add_rule() {
|
||||||
$IPTABLES -I $ZONE 1 \
|
$IPTABLES -I $ZONE 1 \
|
||||||
${proto:+-p $proto} \
|
${proto:+-p $proto} \
|
||||||
|
${icmp_type:+--icmp-type $icmp_type} \
|
||||||
${src_ip:+-s $src_ip} \
|
${src_ip:+-s $src_ip} \
|
||||||
${src_port:+--sport $src_port} \
|
${src_port:+--sport $src_port} \
|
||||||
${src_mac:+-m mac --mac-source $src_mac} \
|
${src_mac:+-m mac --mac-source $src_mac} \
|
||||||
|
|
Loading…
Reference in New Issue