From 8ea5810bda601583a866ee0849f1bb188c08e5aa Mon Sep 17 00:00:00 2001
From: Matthias Schiffer <mschiffer@universe-factory.net>
Date: Tue, 26 Dec 2017 22:58:04 +0100
Subject: [PATCH] gluon-core: firewall: allow inbound ICMPv4 ping on local_node
---
.../luasrc/lib/gluon/upgrade/140-firewall-rules | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)
diff --git a/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules b/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules
index c252aad4e..7ebc80b50 100755
--- a/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules
+++ b/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules
@@ -36,7 +36,17 @@ for _, zone in ipairs({ 'wan', 'local_client', 'mesh' }) do
end
--- allow icmp in/out/forward on all relevant zones
+-- allow icmp in/out on all relevant zones
+uci:section('firewall', 'rule', 'local_client_ICMPv4_in', {
+ src = 'local_client',
+ proto = 'icmp',
+ icmp_type = {
+ 'echo-request',
+ },
+ family = 'ipv4',
+ target = 'ACCEPT',
+})
+
for _, zone in ipairs ({ 'mesh', 'local_client' } ) do
uci:section('firewall', 'rule', zone .. '_ICMPv6_in', {
src = zone,
--
GitLab