From 1fdc17016172d04d52e4b7013efbea9c2240b1ab Mon Sep 17 00:00:00 2001 From: CN_SZTL Date: Sat, 9 Nov 2019 10:01:03 +0800 Subject: [PATCH] firewall: fix fullconenat --- package/network/config/firewall/Makefile | 2 +- package/network/config/firewall/files/firewall.config | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/package/network/config/firewall/Makefile b/package/network/config/firewall/Makefile index 26f8970586..3af7cb926c 100644 --- a/package/network/config/firewall/Makefile +++ b/package/network/config/firewall/Makefile @@ -28,7 +28,7 @@ define Package/firewall SECTION:=net CATEGORY:=Base system TITLE:=OpenWrt C Firewall - DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat + DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat +iptables-mod-fullconenat endef define Package/firewall/description diff --git a/package/network/config/firewall/files/firewall.config b/package/network/config/firewall/files/firewall.config index 8874e9882c..7c2b58ab6a 100644 --- a/package/network/config/firewall/files/firewall.config +++ b/package/network/config/firewall/files/firewall.config @@ -3,6 +3,7 @@ config defaults option input ACCEPT option output ACCEPT option forward REJECT + option fullcone 1 # Uncomment this line to disable ipv6 rules # option disable_ipv6 1