From 0be37efeae0a902c35ba5790b8395e468315f75e Mon Sep 17 00:00:00 2001 From: jow Date: Wed, 6 Jul 2011 22:10:46 +0000 Subject: [package] firewall: - solve scoping issues when multiple values are used, thanks Daniel Dickinson - ignore src_port/dest_port for proto icmp rules, ignore icmp_type for non-icmp rules - properly handle icmp when proto is given in numerical form (1, 58) - support negated icmp types git-svn-id: svn://svn.openwrt.org/openwrt/trunk@27500 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- package/firewall/files/lib/fw.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'package/firewall/files/lib/fw.sh') diff --git a/package/firewall/files/lib/fw.sh b/package/firewall/files/lib/fw.sh index 647bcd6a5..a13eb7eb1 100644 --- a/package/firewall/files/lib/fw.sh +++ b/package/firewall/files/lib/fw.sh @@ -166,7 +166,7 @@ fw__exec() { # { } while [ $# -gt 1 ]; do # special parameter handling case "$1:$2" in - -p:icmp*|--protocol:icmp*) + -p:icmp*|-p:1|-p:58|--protocol:icmp*|--protocol:1|--protocol:58) [ "$app" = ip6tables ] && \ cmdline="$cmdline -p icmpv6" || \ cmdline="$cmdline -p icmp" -- cgit v1.2.3