smeserver-coova-chilli/contribs7/smeserver-coova-chilli-0.2-drop_forward_not_to_ext_if.patch

--- smeserver-coova-chilli-0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/00Functions01Chilli40forwardFrom.drop_forward_not_to_ext_if      2010-10-20 19:30:12.000000000 +0200
+++ smeserver-coova-chilli-0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/00Functions01Chilli40forwardFrom 2010-10-20 19:30:50.000000000 +0200
@@ -7,6 +7,7 @@
     /sbin/iptables -N FORWARD_FROM_CHILLI
     /sbin/iptables -A FORWARD_FROM_CHILLI -j state_chk
     /sbin/iptables -A FORWARD_FROM_CHILLI -s ! $net -j denylog
+    /sbin/iptables -A FORWARD_FROM_CHILLI -o ! \$OUTERIF -j denylog
     /sbin/iptables -A FORWARD_FROM_CHILLI -p icmp --icmp-type echo-request -j ACCEPT
     # Allow http for un-authenticated clients so uamallowed works
     # Https need to be allowed in AllowedOutgoing
1	--- smeserver-coova-chilli-0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/00Functions01Chilli40forwardFrom.drop_forward_not_to_ext_if 2010-10-20 19:30:12.000000000 +0200
2	+++ smeserver-coova-chilli-0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/00Functions01Chilli40forwardFrom 2010-10-20 19:30:50.000000000 +0200
3	@@ -7,6 +7,7 @@
4	/sbin/iptables -N FORWARD_FROM_CHILLI
5	/sbin/iptables -A FORWARD_FROM_CHILLI -j state_chk
6	/sbin/iptables -A FORWARD_FROM_CHILLI -s ! $net -j denylog
7	+ /sbin/iptables -A FORWARD_FROM_CHILLI -o ! \$OUTERIF -j denylog
8	/sbin/iptables -A FORWARD_FROM_CHILLI -p icmp --icmp-type echo-request -j ACCEPT
9	# Allow http for un-authenticated clients so uamallowed works
10	# Https need to be allowed in AllowedOutgoing