[FS#811] r4214 - iptables (?) not read properly /etc/config/firewall

LEDE Bugs lede-bugs at lists.infradead.org
Fri May 26 13:51:52 PDT 2017


A new Flyspray task has been opened.  Details are below. 

User who did this - build000 (build000) 

Attached to Project - LEDE Project
Summary - r4214 - iptables (?) not read properly /etc/config/firewall
Task Type - Bug Report
Category - Base system
Status - Unconfirmed
Assigned To - 
Operating System - All
Severity - Low
Priority - Very Low
Reported Version - Trunk
Due in Version - Undecided
Due Date - Undecided
Details - 
 root at WITI:~# cat /etc/config/firewall

config defaults
	option syn_flood '1'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option drop_invalid '1'

config zone
	option name 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	option network 'lan wwan'
	option family 'ipv4'

config rule
	option target 'ACCEPT'
	option name 'wyjatek'
	option src '*'
	option dest 'lan'
	option dest_ip '192.168.x.x'
	option proto 'all'

config rule
	option target 'ACCEPT'
	option name 'wyjatek'
	option src '*'
	option dest 'lan'
	option dest_ip '192.168.x.x'
	option proto 'all'

config rule
	option target 'ACCEPT'
	option name 'wyjatek'
	option src '*'
	option dest 'lan'
	option dest_ip '192.168.x.x'
	option proto 'all'

config rule
	option target 'ACCEPT'
	option name 'wyjatek'
	option src '*'
	option dest 'lan'
	option dest_ip '192.168.x.x'
	option proto 'all'

config rule
	option src '*'
	option dest 'lan'
	option target 'REJECT'
	option extra '--kerneltz'
	option weekdays 'Sun Mon Tue Wed Thu'
	option start_time '22:00:00'
	option stop_time '23:59:59'
	option name 'harmonogram blokowania sieci od 22 do 00 w Nie,Pon,Wt,Sr,Czw'
	option family 'ipv4'
	option proto 'all'

config rule
	option weekdays 'Mon Tue Wed Thu'
	option start_time '00:00:00'
	option target 'REJECT'
	option extra '--kerneltz'
	option src '*'
	option dest 'lan'
	option stop_time '17:59:59'
	option name 'harmonogram blokowania sieci od 00 do 18 w Pon,Wt,Sr,Czw'
	option family 'ipv4'
	option proto 'all'

config rule
	option src '*'
	option target 'REJECT'
	option weekdays 'Fri'
	option start_time '00:00:00'
	option stop_time '13:59:59'
	option dest 'lan'
	option extra '--kerneltz'
	option name 'harmonogram blokowania sieci od 00 do 14 w Pt'
	option family 'ipv4'
	option proto 'all'

config include
	option path '/etc/firewall.user'

root at WITI:~# /etc/init.d/firewall restart
 * Flushing IPv4 filter table
 * Flushing IPv4 nat table
 * Flushing IPv4 mangle table
 * Flushing IPv6 filter table
 * Flushing IPv6 mangle table
 * Flushing conntrack table ...
 * Populating IPv4 filter table
   * Zone 'lan'
   * Rule 'wyjatek'
   * Rule 'wyjatek'
   * Rule 'wyjatek'
   * Rule 'wyjatek'
   * Rule 'harmonogram blokowania sieci od 22 do 00 w Nie,Pon,Wt,Sr,Czw'
(null) v4: time: option "--kerneltz" can only be used once.


root at WITI:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination 




More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=811



More information about the lede-bugs mailing list