From 394093af0e013ae9b9bbcb4636a7f35dd2fc3f10 Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Mon, 19 Jan 2009 00:16:13 +0000 Subject: [PATCH] applications/luci-ffwizard-leipzig: force /etc/firewall.freifunk include and set drop_invalid to 0 --- .../luasrc/model/cbi/ffwizard.lua | 22 ++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/applications/luci-ffwizard-leipzig/luasrc/model/cbi/ffwizard.lua b/applications/luci-ffwizard-leipzig/luasrc/model/cbi/ffwizard.lua index 87bbe4d1f..053df036a 100644 --- a/applications/luci-ffwizard-leipzig/luasrc/model/cbi/ffwizard.lua +++ b/applications/luci-ffwizard-leipzig/luasrc/model/cbi/ffwizard.lua @@ -187,10 +187,30 @@ function main.write(self, section, value) uci:foreach(external, "fw_rule", function(section) uci:section("firewall", "rule", nil, section) end) + end + + -- Enforce firewall include + local has_include = false + uci:foreach("firewall", "include", + function(section) + if section.path == "/etc/firewall.freifunk" then + has_include = true + end + end) - uci:save("firewall") + if not has_include then + uci:section("firewall", "include", nil, + { path = "/etc/firewall.freifunk" }) end + -- Allow state: invalid packets + uci:foreach("firewall", "defaults", + function(section) + uci:set("firewall", section[".name"], "drop_invalid", "0") + end) + + uci:save("firewall") + -- Crate network interface local netconfig = uci:get_all("freifunk", "interface") -- 2.25.1