projects / project / firewall3.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0990a28) | patch
defaults: emit ctstate INVALID drop rules by default
authorJo-Philipp Wich <jow@openwrt.org>
Fri, 29 Jan 2016 17:22:34 +0000 (18:22 +0100)
committerJo-Philipp Wich <jow@openwrt.org>
Fri, 29 Jan 2016 17:22:38 +0000 (18:22 +0100)
commit8957be6c026858fe414aef69281d8aa06f7ea122
treee4d6a4f234a65b5cc195902992c8bb353ea84131tree | snapshot
parent0990a28a763a77dcd6b0711ac832751adb06f9dacommit | diff
defaults: emit ctstate INVALID drop rules by default

Enable the creation of state invalid catch rules by default to prevent
unnatted traffic from leaking onto the wan.

Fixes OpenWrt ticket #21738.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
defaults.c diff | blob | history
OpenWrt firewall configuration utility