|
@ -198,6 +198,14 @@ mwan3_set_general_iptables() |
|
|
|
|
|
|
|
|
if ! $IPT -S mwan3_hook &> /dev/null; then |
|
|
if ! $IPT -S mwan3_hook &> /dev/null; then |
|
|
$IPT -N mwan3_hook |
|
|
$IPT -N mwan3_hook |
|
|
|
|
|
# do not mangle ipv6 ra service |
|
|
|
|
|
if [ "$IPT" = "$IPT6" ]; then |
|
|
|
|
|
$IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN |
|
|
|
|
|
$IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN |
|
|
|
|
|
$IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN |
|
|
|
|
|
$IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN |
|
|
|
|
|
$IPT6 -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 137 -j RETURN |
|
|
|
|
|
fi |
|
|
$IPT -A mwan3_hook -j CONNMARK --restore-mark --nfmask $MMX_MASK --ctmask $MMX_MASK |
|
|
$IPT -A mwan3_hook -j CONNMARK --restore-mark --nfmask $MMX_MASK --ctmask $MMX_MASK |
|
|
$IPT -A mwan3_hook -m mark --mark 0x0/$MMX_MASK -j mwan3_ifaces_in |
|
|
$IPT -A mwan3_hook -m mark --mark 0x0/$MMX_MASK -j mwan3_ifaces_in |
|
|
$IPT -A mwan3_hook -m mark --mark 0x0/$MMX_MASK -j mwan3_connected |
|
|
$IPT -A mwan3_hook -m mark --mark 0x0/$MMX_MASK -j mwan3_connected |
|
|