+
+# Add local_restrict to wan firewall zone
+handle_zonewan() {
+ config_get name "$1" name
+ if [ "$name" == "wan" ]; then
+ uci set firewall.$1.local_restrict=1
+ fi
+}
+config_foreach handle_zonewan zone && uci_commitverbose "Enable local_restrict for zone wan" firewall