1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-02-15 03:51:51 +00:00

Fix ipsec fw config

This commit is contained in:
Ycarus (Yannick Chabanois) 2020-01-31 21:32:33 +01:00
parent 8dc387df32
commit 299ca28e4d

View file

@ -15,7 +15,7 @@ uci -q batch <<-EOF >/dev/null
rename firewall.@rule[-1]="ike"
set firewall.@rule[-1].name="ike"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].src="vpn"
set firewall.@rule[-1].proto="udp"
set firewall.@rule[-1].dest_port="500"
delete firewall.ipsec
@ -23,7 +23,7 @@ uci -q batch <<-EOF >/dev/null
rename firewall.@rule[-1]="ipsec"
set firewall.@rule[-1].name="ipsec"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].src="vpn"
set firewall.@rule[-1].proto="udp"
set firewall.@rule[-1].dest_port="4500"
delete firewall.ah
@ -31,14 +31,14 @@ uci -q batch <<-EOF >/dev/null
rename firewall.@rule[-1]="ah"
set firewall.@rule[-1].name="ah"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].src="vpn"
set firewall.@rule[-1].proto="ah"
delete firewall.esp
add firewall rule
rename firewall.@rule[-1]="esp"
set firewall.@rule[-1].name="esp"
set firewall.@rule[-1].target="ACCEPT"
set firewall.@rule[-1].src="wan"
set firewall.@rule[-1].src="vpn"
set firewall.@rule[-1].proto="esp"
commit firewall
EOF