From 7a3f1abe78775d100ce4fc0e518afb55811de5e3 Mon Sep 17 00:00:00 2001 From: "Ycarus (Yannick Chabanois)" Date: Tue, 8 Aug 2023 21:53:29 +0200 Subject: [PATCH] Disable fullcone by default --- .../patches/999-01-firewall4-add-fullcone-support.patch | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/6.1/package/network/config/firewall4/patches/999-01-firewall4-add-fullcone-support.patch b/6.1/package/network/config/firewall4/patches/999-01-firewall4-add-fullcone-support.patch index aef8b3d4..c0f4b5ff 100644 --- a/6.1/package/network/config/firewall4/patches/999-01-firewall4-add-fullcone-support.patch +++ b/6.1/package/network/config/firewall4/patches/999-01-firewall4-add-fullcone-support.patch @@ -27,7 +27,7 @@ index b9a4647..7187723 100644 option forward REJECT # Uncomment this line to disable ipv6 rules # option disable_ipv6 1 -+ option fullcone '1' ++ option fullcone '0' config zone option name lan @@ -35,8 +35,8 @@ index b9a4647..7187723 100644 option input REJECT option output ACCEPT option forward REJECT -+ option fullcone4 '1' -+ option fullcone6 '1' ++ option fullcone4 '0' ++ option fullcone6 '0' option masq 1 option mtu_fix 1