[package] firewall:
authorJo-Philipp Wich <jow@openwrt.org>
Thu, 30 Jun 2011 01:31:23 +0000 (01:31 +0000)
committerJo-Philipp Wich <jow@openwrt.org>
Thu, 30 Jun 2011 01:31:23 +0000 (01:31 +0000)
commit534feb8c9b68db0efcf9e713e90e44e7778bb228
tree16c0df4e8d376ce0b821752124885dd9195da43c
parentdcd4203ae6099282511e3f27e3611e1143e1c842
[package] firewall:
- allow multiple ports, protocols, macs, icmp types per rule
- implement "limit" and "limit_burst" options for rules
- implement "extra" option to rules and redirects for passing arbritary flags to iptables
- implement negations for "src_port", "dest_port", "src_dport", "src_mac", "proto" and "icmp_type" options
- allow wildcard (*) "src" and "dest" options in rules to allow specifying "any" source or destination
- validate symbolic icmp-type names against the selected iptables binary
- properly handle forwarded ICMPv6 traffic in the default configuration

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@27317 3c298f89-4303-0410-b956-a3cf2f4a3e73
package/firewall/Makefile
package/firewall/files/firewall.config
package/firewall/files/lib/core_redirect.sh
package/firewall/files/lib/core_rule.sh
package/firewall/files/lib/fw.sh
package/firewall/files/reflection.hotplug