mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-23 23:42:43 +00:00
allow GRE protocol in default firewall settings
SVN-Revision: 416
This commit is contained in:
parent
0056f9709d
commit
cee542700b
@ -12,7 +12,8 @@ done
|
||||
|
||||
$IPT -t filter -A INPUT -m state --state INVALID -j DROP
|
||||
$IPT -t filter -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
|
||||
$IPT -t filter -A INPUT -p icmp -j ACCEPT
|
||||
$IPT -t filter -A INPUT -p icmp -j ACCEPT
|
||||
$IPT -t filter -A INPUT -p 47 -j ACCEPT # allow GRE
|
||||
$IPT -t filter -A INPUT -i $WAN -p tcp -j REJECT --reject-with tcp-reset
|
||||
$IPT -t filter -A INPUT -i $WAN -j REJECT --reject-with icmp-port-unreachable
|
||||
$IPT -t filter -A FORWARD -m state --state INVALID -j DROP
|
||||
|
Loading…
Reference in New Issue
Block a user