mirror
/
openwrt
mirror of https://git.openwrt.org/openwrt/openwrt.git
1
0
Fork 0
Code Releases Activity
openwrt/include
History
Jo-Philipp Wich a9977eca91 firewall: allow local redirection of ports 
Allow a redirect like:

config redirect
        option src 'wan'
        option dest 'lan'
        option src_dport '22001'
        option dest_port '22'
        option proto 'tcp'

note the absence of the "dest_ip" field, meaning to terminate the connection on the firewall itself.

This patch makes three changes:

(1) moves the conntrack module into the conntrack package (but not any of the conntrack_* helpers).
(2) fixes a bug where the wrong table is used when the "dest_ip" field is absent.
(3) accepts incoming connections on the destination port on the input_ZONE table, but only for DNATted
    connections.

In the above example,

ssh -p 22 root@myrouter

would fail from the outside, but:

ssh -p 22001 root@myrouter

would succeed.  This is handy if:

(1) you want to avoid ssh probes on your router, or
(2) you want to redirect incoming connections on port 22 to some machine inside your firewall, but
    still want to allow firewall access from outside.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

SVN-Revision: 26617
 		2011-04-12 20:03:59 +00:00
..
site site: set ac_cv_sizeof_off_t=8 to fix autoconf applications using it for detecting largefile support (#8376, #5681) 2011-04-04 12:11:43 +00:00
autotools.mk autotools.mk: disable autoreconf recursion if more than one dir is given in PKG_AUTOMAKE_PATHS 2011-04-11 14:18:55 +00:00
cmake.mk cmake.mk: don't assume toolchain binaries in .../bin/ if an external toolchain is used, rely on `which` instead 2011-04-11 02:11:11 +00:00
debug.mk build: undefine debug helper templates used by subdir.mk if the DEBUG variable is empty, speeds up "make prereq" by 25% when lots of packages are installed 2011-04-03 03:40:01 +00:00
depends.mk change the recursive dependency template to use more make evaluation - the shell command got so long that it triggered "Argument list too long" on some systems (#8231) 2010-11-24 14:07:12 +00:00
download.mk add support for md5sum checks for mirrored tarballs of packages with version control source urls 2011-03-21 23:02:06 +00:00
host-build.mk add a missing wrapper for the refresh target for host builds 2011-01-28 12:13:58 +00:00
host.mk host.mk: introduce PATCH which refers to either gpatch or patch 2010-10-07 11:33:12 +00:00
image.mk tools/squashfs4: update to version 4.2 (adds support for xz compression) 2011-04-03 01:02:00 +00:00
kernel-build.mk build: clean up handling of the kernel config 2011-04-06 14:48:55 +00:00
kernel-defaults.mk build: clean up handling of the kernel config 2011-04-06 14:48:55 +00:00
kernel-version.mk kernel: add md5sum of kernel 2011-04-03 14:54:37 +00:00
kernel.mk make ModuleAutoLoad more readable 2010-10-18 06:58:11 +00:00
netfilter.mk firewall: allow local redirection of ports 2011-04-12 20:03:59 +00:00
nls.mk prepare support for libiconv, libintl stub/full switching 2011-02-02 01:26:19 +00:00
package-bin.mk only build bin packages for the selected build variants (same behaviour as with ipkg builds) 2010-05-15 15:57:00 +00:00
package-defaults.mk add a new package metadata variable MDEPENDS for specifying local menuconfig dependencies that do not propagate to other packages 2011-04-05 19:03:51 +00:00
package-dumpinfo.mk add a new package metadata variable MDEPENDS for specifying local menuconfig dependencies that do not propagate to other packages 2011-04-05 19:03:51 +00:00
package-ipkg.mk build: move the SH_FUNC eval to the beginning of the opkg control file build command chain, not in front of every single command 2011-04-03 02:10:32 +00:00
package-version-override.mk replace old quote stripping with calls to qstrip macro 2010-04-29 00:32:44 +00:00
package.mk add support for md5sum checks for mirrored tarballs of packages with version control source urls 2011-03-21 23:02:06 +00:00
prereq-build.mk add git (git-core) as a prerequisite (#8866) 2011-02-14 15:06:11 +00:00
prereq.mk some minor fixes, cleanups, package build abstraction 2007-09-28 01:23:56 +00:00
quilt.mk quilt.mk: export PATCH for patch-kernel.sh 2010-10-08 09:21:34 +00:00
scan.mk build: log package dump failures to logs to avoid forcing user to write cryptic commands to figure out what's going on 2011-04-06 14:48:59 +00:00
shell.sh clean up md5s() shell function 2008-09-02 10:57:51 +00:00
subdir.mk make the build system a bit more silent without V=99 2011-04-04 00:54:37 +00:00
target.mk build: clean up handling of the kernel config 2011-04-06 14:48:55 +00:00
toolchain-build.mk optionally support parallel toolchain build. This defaults to off, because certain toolchain versions are known to break on parallel build. However, it significantly speeds up the build and latest versions of the tools do compile fine. 2010-10-03 12:54:07 +00:00
toplevel.mk toplevel: add a warning about .config being out of sync after an update 2011-04-04 00:54:33 +00:00
unpack.mk speed up the build system by including include/shell.sh on shell commands only where necessary 2010-08-19 12:49:37 +00:00
verbose.mk Allow colored output to be disabled when running a non-verbose build by setting NO_COLOR=1 2010-02-08 22:28:19 +00:00