[source] ppp: propagate master firewall zone to dynamic slave interface
LEDE Commits
lede-commits at lists.infradead.org
Wed May 31 07:53:16 PDT 2017
dedeckeh pushed a commit to source.git, branch master:
https://git.lede-project.org/21f25bc4a325b3075d6426047640e9cf6176894c
commit 21f25bc4a325b3075d6426047640e9cf6176894c
Author: Hans Dedecker <dedeckeh at gmail.com>
AuthorDate: Wed May 31 16:24:11 2017 +0200
ppp: propagate master firewall zone to dynamic slave interface
Assign the virtual DHCPv6 interface the firewall zone of the parent interface
so fw3 knows the zone to which the virtual DHCPv6 interface belongs.
This guarantees the firewall settings are applied correctly for the virtual
DHCPv6 interface and allows to query the zone to which the virtual DHCPv6
interface belongs via the fw3 network option.
Signed-off-by: Hans Dedecker <dedeckeh at gmail.com>
---
package/network/services/ppp/Makefile | 2 +-
package/network/services/ppp/files/lib/netifd/ppp6-up | 3 +++
2 files changed, 4 insertions(+), 1 deletion(-)
diff --git a/package/network/services/ppp/Makefile b/package/network/services/ppp/Makefile
index 8b0daf2..6c615ca 100644
--- a/package/network/services/ppp/Makefile
+++ b/package/network/services/ppp/Makefile
@@ -10,7 +10,7 @@ include $(INCLUDE_DIR)/kernel.mk
PKG_NAME:=ppp
PKG_VERSION:=2.4.7
-PKG_RELEASE:=11
+PKG_RELEASE:=12
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://download.samba.org/pub/ppp/
diff --git a/package/network/services/ppp/files/lib/netifd/ppp6-up b/package/network/services/ppp/files/lib/netifd/ppp6-up
index 8ad0322..3852bf6 100755
--- a/package/network/services/ppp/files/lib/netifd/ppp6-up
+++ b/package/network/services/ppp/files/lib/netifd/ppp6-up
@@ -17,10 +17,13 @@ proto_send_update "$PPP_IPPARAM"
}
if [ -n "$AUTOIPV6" ]; then
+ ZONE=$(fw3 -q network $PPP_IPPARAM 2>/dev/null)
+
json_init
json_add_string name "${PPP_IPPARAM}_6"
json_add_string ifname "@$PPP_IPPARAM"
json_add_string proto "dhcpv6"
+ [ -n "$ZONE" ] && json_add_string zone "$ZONE"
[ -n "$EXTENDPREFIX" ] && json_add_string extendprefix 1
[ -n "$IP6TABLE" ] && json_add_string ip6table $IP6TABLE
[ -n "$PEERDNS" ] && json_add_boolean peerdns $PEERDNS
More information about the lede-commits
mailing list