forked from Ivasoft/openwrt
firewall: comply with REC-22, REC-24 of RFC 6092
Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46478
This commit is contained in:
@@ -159,19 +159,18 @@ config include
|
||||
# option proto tcp
|
||||
|
||||
# allow IPsec/ESP and ISAKMP passthrough
|
||||
#config rule
|
||||
# option src wan
|
||||
# option dest lan
|
||||
# option protocol esp
|
||||
# option target ACCEPT
|
||||
config rule
|
||||
option src wan
|
||||
option dest lan
|
||||
option protocol esp
|
||||
option target ACCEPT
|
||||
|
||||
#config rule
|
||||
# option src wan
|
||||
# option dest lan
|
||||
# option src_port 500
|
||||
# option dest_port 500
|
||||
# option proto udp
|
||||
# option target ACCEPT
|
||||
config rule
|
||||
option src wan
|
||||
option dest lan
|
||||
option dest_port 500
|
||||
option proto udp
|
||||
option target ACCEPT
|
||||
|
||||
### FULL CONFIG SECTIONS
|
||||
#config rule
|
||||
|
||||
Reference in New Issue
Block a user