forked from freifunk-franken/firmware
Robert Langhammer
811fdac32d
With commit [1] the ipv4 firewall on wan interface was removed.
This patch adds the ssh connection limit for ipv4.
IPv6 is already limited.
[1] 52e15e072c ("fff-firewall: Remove ssh firewall on WAN interface")
Signed-off-by: Robert Langhammer <rlanghammer@web.de>
Reviewed-by: Fabian Bläse <fabian@blaese.de>
[improve commit reference]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
34 lines
726 B
Makefile
34 lines
726 B
Makefile
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=fff-firewall
|
|
PKG_RELEASE:=7
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/$(PKG_NAME)
|
|
SECTION:=base
|
|
CATEGORY:=Freifunk
|
|
TITLE:=Freifunk-Franken firewall
|
|
URL:=http://www.freifunk-franken.de
|
|
DEPENDS:=+arptables \
|
|
+ebtables +ebtables-utils \
|
|
+kmod-ebtables-ipv4 +kmod-ebtables-ipv6 \
|
|
+iptables-mod-filter +iptables-mod-ipopt +iptables-mod-conntrack-extra \
|
|
+kmod-nf-conntrack6
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/description
|
|
This is the firewall for the Freifunk Franken Firmware
|
|
It is used to configure firewall.
|
|
endef
|
|
|
|
define Build/Compile
|
|
# nothing
|
|
endef
|
|
|
|
define Package/$(PKG_NAME)/install
|
|
$(CP) ./files/* $(1)/
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,$(PKG_NAME)))
|