gluon-mesh-batman-adv: Do not ACCEPT incoming packets.

For security reasons we should not accept incoming packets per default
and instead allow specific services on specific interfaces.
This commit is contained in:
Daniel Ehlers 2014-05-06 21:24:04 +02:00 committed by Matthias Schiffer
parent c64bdff1c0
commit 6f9fbcc6b7
1 changed files with 0 additions and 7 deletions

View File

@ -29,13 +29,6 @@ uci_set firewall client input 'ACCEPT'
uci_set firewall client output 'ACCEPT'
uci_set firewall client forward 'REJECT'
config_load firewall
accept_input_on_wan() {
config_get name "$1" name
[ "$name" = 'wan' ] && uci_set firewall "$1" input 'ACCEPT'
}
config_foreach accept_input_on_wan 'zone'
uci_commit firewall
uci_set dhcp '@dnsmasq[0]' boguspriv '0'