1 . /lib/firewall/uci_firewall.sh
3 config_get ifname $INTERFACE ifname
4 [ "$ifname" == "lo" ] && exit 0
9 config_get name $1 name
10 config_get network $1 network
11 [ -z "$network" ] && network=$name
13 [ "$n" = "$INTERFACE" ] && ZONE="$ZONE $name"
17 config_foreach load_zones zone
19 [ -z "$ZONE" ] && exit 0
25 config_get parent "$1" interface
26 [ "$network" != "$INTERFACE" -a "$parent" != "$INTERFACE" ] && return 0
28 config_get ipaddr "$network" ipaddr
29 [ -n "$ipaddr" ] || return 0
30 config_get netmask "$network" netmask
31 [ -n "$netmask" ] || return 0
32 eval "$(ipcalc.sh $ipaddr $netmask)"
34 logger -t firewall.freifunk "adding nat rule for $iface($NETWORK/$PREFIX)"
35 iptables -t nat -A "natfix_$iface" -s "$NETWORK/$PREFIX" -d "$NETWORK/$PREFIX" -j ACCEPT
38 [ ifup = "$ACTION" ] && {
39 iptables -t nat -N "natfix_$ifname"
40 natfix_addr_add "$INTERFACE" "$ifname"
41 config_foreach natfix_addr_add alias "$ifname"
45 config_get loaded core loaded
47 logger -t firewall.freifunk "applying nat rules on zone $z"
48 iptables -t nat -I "zone_${z}_nat" 1 -o "$ifname" -j "natfix_$ifname"
53 [ ifdown = "$ACTION" ] && {
57 iptables -t nat -D "zone_${z}_nat" -o "$ifname" -j "natfix_$ifname" 2>/dev/null
59 iptables -t nat -F "natfix_$ifname" 2>/dev/null
60 iptables -t nat -X "natfix_$ifname" 2>/dev/null