openwrt/package/network/config
Jo-Philipp Wich 920170a27f firewall: fix forwarding local subnet traffic
Packets which are merely forwarded by the router and which are neither
involved in any DNAT/SNAT nor originate locally, are considered INVALID
from a conntrack point of view, causing them to get dropped in the
zone_*_dest_ACCEPT chains, since those only allow stream with state NEW
or UNTRACKED.

Remove the ctstate restriction on dest accept chains to properly pass-
through unrelated 3rd party traffic.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-01-13 18:31:36 +01:00
..
firewall firewall: fix forwarding local subnet traffic 2017-01-13 18:31:36 +01:00
gre gre: add different per-protocol prefixes to GRE-TAP IPv4/6 tunnel interfaces. 2017-01-03 14:36:37 +01:00
ipip ipip: Support fqdn as remote tunnel endpoint 2016-10-26 17:53:53 +02:00
ltq-adsl-app treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
ltq-vdsl-app treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
netifd netifd: update to the latest version 2017-01-13 14:54:12 +01:00
qos-scripts treewide: replace nbd@openwrt.org with nbd@nbd.name 2016-06-07 08:58:42 +02:00
soloscli treewide: clean up download hashes 2016-12-16 22:39:22 +01:00
swconfig swconfig: replace the shared library with a static one 2016-12-14 12:13:13 +01:00
vti vti: add empty install rules for vtiv4 & vtiv6 2016-12-22 16:33:28 +01:00