From f610c58b827bf1afe566df347e5f9df24b6e587f Mon Sep 17 00:00:00 2001 From: AE6XE Date: Sun, 24 May 2015 15:57:44 -0700 Subject: [PATCH] BUGFIX: tunnel firewall to behave same as dtdlink part 2 --- files/usr/local/bin/vtun_up | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/files/usr/local/bin/vtun_up b/files/usr/local/bin/vtun_up index be089d92..c1041fdc 100755 --- a/files/usr/local/bin/vtun_up +++ b/files/usr/local/bin/vtun_up @@ -106,17 +106,22 @@ fi if [ "$action" = "up" ] ; then # Adding route policies for tunnel interface + # identical to hotplug for dtdlink if ( ! `ip rule list | egrep "^20020:.*$interface.*30" > /dev/null`) then if [ -e /etc/config/dmz-mode ] ; then ip rule add pref 20010 iif $interface lookup 29 # local interfaces fi ip rule add pref 20020 iif $interface lookup 30 # mesh + ip rule add pref 20080 iif $interface lookup 31 # gateway + ip rule add pref 20090 iif $interface lookup main ip rule add pref 20099 iif $interface unreachable fi else # Remove route policies for tunnel interface ip rule del pref 20010 iif $interface lookup 29 ip rule del pref 20020 iif $interface lookup 30 + ip rule del pref 20080 iff $interface lookup 31 + ip rule del pref 20090 iff $interface lookup main ip rule del pref 20099 iif $interface unreachable fi