aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJo-Philipp Wich <jow@openwrt.org>2013-11-18 11:59:27 +0000
committerJo-Philipp Wich <jow@openwrt.org>2013-11-18 11:59:27 +0000
commitbc9043cc531a7fbb67a68ee0fd6d57e28b395edc (patch)
treeeb695c9d3c1805402df7d3d826535df29d502562
parent82e624279818643f58b92a88277f6a9eb1fd7ed0 (diff)
downloadupstream-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.gz
upstream-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.tar.bz2
upstream-bc9043cc531a7fbb67a68ee0fd6d57e28b395edc.zip
firewall: optimize DNAT rules and skip invalid rules and redirects (#14485)
- instead of writing one (or more) ACCEPT rules in the filter table for each redirect install a global ctstate DNAT accept rule per zone - discard rules and redirects which have invalid options set instead of silently skipping the invalid values SVN-Revision: 38849
-rw-r--r--package/network/config/firewall/Makefile4
1 files changed, 2 insertions, 2 deletions
diff --git a/package/network/config/firewall/Makefile b/package/network/config/firewall/Makefile
index ac4d16a388..cde3aa8ebc 100644
--- a/package/network/config/firewall/Makefile
+++ b/package/network/config/firewall/Makefile
@@ -8,13 +8,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=firewall
-PKG_VERSION:=2013-10-23
+PKG_VERSION:=2013-11-18
PKG_RELEASE:=$(PKG_SOURCE_VERSION)
PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL:=git://nbd.name/firewall3.git
PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
-PKG_SOURCE_VERSION:=c25922c05ae594c4c35fa65f27fd21c3a033f4ec
+PKG_SOURCE_VERSION:=fa3386a7054aa9541decd68c8cf8de1e0d6f8832
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>