1 |
vip-ire |
1.1 |
--- smeserver-coova-chilli-0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/00Functions01Chilli40forwardFrom.drop_forward_not_to_ext_if 2010-10-20 19:30:12.000000000 +0200 |
2 |
|
|
+++ smeserver-coova-chilli-0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/00Functions01Chilli40forwardFrom 2010-10-20 19:30:50.000000000 +0200 |
3 |
|
|
@@ -7,6 +7,7 @@ |
4 |
|
|
/sbin/iptables -N FORWARD_FROM_CHILLI |
5 |
|
|
/sbin/iptables -A FORWARD_FROM_CHILLI -j state_chk |
6 |
|
|
/sbin/iptables -A FORWARD_FROM_CHILLI -s ! $net -j denylog |
7 |
|
|
+ /sbin/iptables -A FORWARD_FROM_CHILLI -o ! \$OUTERIF -j denylog |
8 |
|
|
/sbin/iptables -A FORWARD_FROM_CHILLI -p icmp --icmp-type echo-request -j ACCEPT |
9 |
|
|
# Allow http for un-authenticated clients so uamallowed works |
10 |
|
|
# Https need to be allowed in AllowedOutgoing |