Mirrors
/
aredn
mirror of https://github.com/aredn/aredn.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Prevent mesh from accessing internal LAN (#175)

This commit is contained in:
battlehax 2022-02-28 14:41:22 -06:00 committed by GitHub
parent 7600284487
commit 86473b642e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
files/etc/local/mesh-firewall/60-block-lan-across-wan Normal file
View File

@ -0,0 +1,7 @@
#!/bin/sh
INET_IFACE=$(uci get network.wan.ifname 2>/dev/null)
iptables -A FORWARD -o $INET_IFACE -d 10.0.0.0/8 -j REJECT
iptables -A FORWARD -o $INET_IFACE -d 172.16.0.0/12 -j REJECT
iptables -A FORWARD -o $INET_IFACE -d 192.168.0.0/16 -j REJECT