diff options
| author | Marco Martins <marcomartins86@gmail.com> | 2020-11-19 21:53:31 +0000 |
|---|---|---|
| committer | Rosen Penev <rosenp@gmail.com> | 2020-11-25 14:12:18 -0800 |
| commit | 773b87977eb176a15f18d31c71987a398d34ee70 (patch) | |
| tree | a9c1d39640465cfe4fd2792d9c704d51f9f45486 /net/miniupnpd | |
| parent | 4d824243e6330b44ce42cbacf6a0898db5ff572f (diff) | |
miniupnpd: Added chain rule to filter table so udp stun incoming connections rules works
Signed-off-by: Marco Martins <marcomartins86@gmail.com>
Diffstat (limited to 'net/miniupnpd')
| -rw-r--r-- | net/miniupnpd/files/firewall.include | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/net/miniupnpd/files/firewall.include b/net/miniupnpd/files/firewall.include index 97908af22..911e0675c 100644 --- a/net/miniupnpd/files/firewall.include +++ b/net/miniupnpd/files/firewall.include @@ -31,13 +31,15 @@ add_extzone_rules() { [ -z "$ext_zone" ] && return # IPv4 - due to NAT, need to add both to nat and filter table - # need to insert as penultimate rule for forward & postrouting since final rule might be a fw3 REJECT + # need to insert as penultimate rule for input & forward & postrouting since final rule might be a fw3 REJECT + iptables_prepend_rule "$IPTABLES" filter "zone_${ext_zone}_input" MINIUPNPD iptables_prepend_rule "$IPTABLES" filter "zone_${ext_zone}_forward" MINIUPNPD $IPTABLES -t nat -A "zone_${ext_zone}_prerouting" -j MINIUPNPD iptables_prepend_rule "$IPTABLES" nat "zone_${ext_zone}_postrouting" MINIUPNPD-POSTROUTING # IPv6 if available - filter only [ -x $IP6TABLES ] && { + iptables_prepend_rule "$IP6TABLES" filter "zone_${ext_zone}_input" MINIUPNPD iptables_prepend_rule "$IP6TABLES" filter "zone_${ext_zone}_forward" MINIUPNPD } ADDED=$(($ADDED + 1)) |