mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-03-09 15:40:03 +00:00
Code Issues Releases Wiki Activity

Fix https://github.com/Ysurac/openmptcprouter/issues/2453 and add a limit on ICMP

Browse source
This commit is contained in:
Ycarus (Yannick Chabanois) 2022-08-07 20:10:15 +02:00
parent d700848f06
commit b9d5d51d42
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
openmptcprouter/files/etc/uci-defaults/1980-omr-firewall
View file

@ -77,6 +77,7 @@ if [ "$(uci -q show firewall | grep Allow-All-Ping)" = "" ]; then
set firewall.@rule[-1].dest='*'
set firewall.@rule[-1].src='*'
set firewall.@rule[-1].icmp_type='echo-request'
set firewall.@rule[-1].limit='1000/sec'
commit firewall
EOF
fi
@ -195,6 +196,7 @@ if [ "$(uci -q get firewall.allowicmpipv6)" = "" ]; then
set firewall.allowicmpipv6.src='wan'
set firewall.allowicmpipv6.name='Allow IPv6 ICMP'
set firewall.allowicmpipv6.family='ipv6'
set firewall.@rule[-1].limit='1000/sec'
set firewall.allowicmpipv6.icmp_type='neighbour-advertisement neighbour-solicitation router-advertisement router-solicitation'
commit firewall
EOF
@ -244,6 +246,7 @@ if [ "$(uci -q get openmptcprouter.settings.sipalg)" != "1" ]; then
uci -q batch <<-EOF >/dev/null
set firewall.zone_lan.auto_helper='0'
set firewall.zone_wan.auto_helper='0'
set firewall.zone_vpn.auto_helper='0'
commit firewall
EOF
rmmod nf_nat_sip 2>&1 >/dev/null