Skip to content

Commit e89bd59

Browse files
authored
Revert "fix: remove WAN link-local firewall exception"
1 parent b8f5f2e commit e89bd59

1 file changed

Lines changed: 13 additions & 0 deletions

File tree

  • packages/lime-proto-wan/files/usr/lib/lua/lime/proto

packages/lime-proto-wan/files/usr/lib/lua/lime/proto/wan.lua

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,19 @@ function wan.setup_interface(ifname, args)
4949
end
5050

5151
uci:save("network")
52+
53+
--! Accepting link local traffic also on WAN should not cause hazards.
54+
--! It is very helpful in cases where the devices have problem to the other
55+
--! ports, to have at least an addictional way to enter for rescue operation
56+
local ALLOW_WAN_LL_SECT = "lime_allow_wan_all_link_local"
57+
uci:set("firewall", ALLOW_WAN_LL_SECT, "rule")
58+
uci:set("firewall", ALLOW_WAN_LL_SECT, "name", ALLOW_WAN_LL_SECT)
59+
uci:set("firewall", ALLOW_WAN_LL_SECT, "src", "wan")
60+
uci:set("firewall", ALLOW_WAN_LL_SECT, "family", "ipv6")
61+
uci:set("firewall", ALLOW_WAN_LL_SECT, "src_ip", "fe80::/10")
62+
uci:set("firewall", ALLOW_WAN_LL_SECT, "dest_ip", "fe80::/10")
63+
uci:set("firewall", ALLOW_WAN_LL_SECT, "target", "ACCEPT")
64+
uci:save("firewall")
5265
end
5366

5467
return wan

0 commit comments

Comments
 (0)