Changeset 390
- Timestamp:
- 10/26/07 22:42:15 (10 months ago)
- Files:
-
- wifidog/wifidog-client/src/fw_iptables.c (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
wifidog/wifidog-client/src/fw_iptables.c
r389 r390 312 312 313 313 /* XXX: Why this? it means that connections setup after authentication 314 stay open even after the connection is done...315 iptables_do_command("-t filter -A " TABLE_WIFIDOG_WIFI_TO_INTERNET " -m state --state RELATED,ESTABLISHED -j ACCEPT");*/316 317 //Won't this rule NEVER match anyway?!?!? benoitg, 2007-06-23318 //iptables_do_command("-t filter -A " TABLE_WIFIDOG_WIFI_TO_INTERNET " -i %s -m state --state NEW -j DROP", ext_interface);319 314 stay open even after the connection is done... 315 iptables_do_command("-t filter -A " TABLE_WIFIDOG_WIFI_TO_INTERNET " -m state --state RELATED,ESTABLISHED -j ACCEPT");*/ 316 317 //Won't this rule NEVER match anyway?!?!? benoitg, 2007-06-23 318 //iptables_do_command("-t filter -A " TABLE_WIFIDOG_WIFI_TO_INTERNET " -i %s -m state --state NEW -j DROP", ext_interface); 319 320 320 /* TCPMSS rule for PPPoE */ 321 321 iptables_do_command("-t filter -A " TABLE_WIFIDOG_WIFI_TO_INTERNET " -o %s -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu", ext_interface); … … 341 341 342 342 iptables_do_command("-t filter -A " TABLE_WIFIDOG_WIFI_TO_INTERNET " -j " TABLE_WIFIDOG_UNKNOWN); 343 344 343 iptables_load_ruleset("filter", "unknown-users", TABLE_WIFIDOG_UNKNOWN); 345 344 iptables_do_command("-t filter -A " TABLE_WIFIDOG_UNKNOWN " -j REJECT --reject-with icmp-port-unreachable");
