firewall: comply with REC-22, REC-24 of RFC 6092
Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@46507 3c298f89-4303-0410-b956-a3cf2f4a3e73master
parent
0c4feeac82
commit
2c77afaa7b
|
@ -8,7 +8,7 @@
|
||||||
include $(TOPDIR)/rules.mk
|
include $(TOPDIR)/rules.mk
|
||||||
|
|
||||||
PKG_NAME:=firewall
|
PKG_NAME:=firewall
|
||||||
PKG_VERSION:=2015-05-26
|
PKG_VERSION:=2015-07-22
|
||||||
PKG_RELEASE:=$(PKG_SOURCE_VERSION)
|
PKG_RELEASE:=$(PKG_SOURCE_VERSION)
|
||||||
|
|
||||||
PKG_SOURCE_PROTO:=git
|
PKG_SOURCE_PROTO:=git
|
||||||
|
|
|
@ -159,19 +159,18 @@ config include
|
||||||
# option proto tcp
|
# option proto tcp
|
||||||
|
|
||||||
# allow IPsec/ESP and ISAKMP passthrough
|
# allow IPsec/ESP and ISAKMP passthrough
|
||||||
#config rule
|
config rule
|
||||||
# option src wan
|
option src wan
|
||||||
# option dest lan
|
option dest lan
|
||||||
# option protocol esp
|
option protocol esp
|
||||||
# option target ACCEPT
|
option target ACCEPT
|
||||||
|
|
||||||
#config rule
|
config rule
|
||||||
# option src wan
|
option src wan
|
||||||
# option dest lan
|
option dest lan
|
||||||
# option src_port 500
|
option dest_port 500
|
||||||
# option dest_port 500
|
option proto udp
|
||||||
# option proto udp
|
option target ACCEPT
|
||||||
# option target ACCEPT
|
|
||||||
|
|
||||||
### FULL CONFIG SECTIONS
|
### FULL CONFIG SECTIONS
|
||||||
#config rule
|
#config rule
|
||||||
|
|
Loading…
Reference in New Issue