Skip to content
Snippets Groups Projects
Commit aba0a3bc authored by Daniel Ehlers's avatar Daniel Ehlers Committed by Matthias Schiffer
Browse files

gluon-mesh-batman-adv: Do not ACCEPT incoming packets.

For security reasons we should not accept incoming packets per default
and instead allow specific services on specific interfaces.
parent acd60a22
No related branches found
No related tags found
No related merge requests found
......@@ -29,13 +29,6 @@ uci_set firewall client input 'ACCEPT'
uci_set firewall client output 'ACCEPT'
uci_set firewall client forward 'REJECT'
config_load firewall
accept_input_on_wan() {
config_get name "$1" name
[ "$name" = 'wan' ] && uci_set firewall "$1" input 'ACCEPT'
}
config_foreach accept_input_on_wan 'zone'
uci_commit firewall
uci_set dhcp '@dnsmasq[0]' boguspriv '0'
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment