[openwrt/openwrt] unetd: add firewall input rule for global port

LEDE Commits lede-commits at lists.infradead.org
Tue Dec 17 12:58:38 PST 2024


nbd pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/f8a16524c4a4070d61a32f6203ea5e26cea125d4

commit f8a16524c4a4070d61a32f6203ea5e26cea125d4
Author: Felix Fietkau <nbd at nbd.name>
AuthorDate: Tue Dec 17 14:51:18 2024 +0100

    unetd: add firewall input rule for global port
    
    Ensure that peers can be exchanged over any interface
    
    Signed-off-by: Felix Fietkau <nbd at nbd.name>
---
 package/network/services/unetd/files/unetd.init | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/package/network/services/unetd/files/unetd.init b/package/network/services/unetd/files/unetd.init
index c1124821ee..7c980e3d0d 100644
--- a/package/network/services/unetd/files/unetd.init
+++ b/package/network/services/unetd/files/unetd.init
@@ -13,5 +13,20 @@ start_service() {
 	procd_set_param command "$PROG" -h /var/run/unetd/hosts -u /var/run/unetd/socket
 	procd_set_param respawn
 	procd_set_param limits core="unlimited"
+
+	procd_open_data
+	json_add_array firewall
+
+	json_add_object ""
+	json_add_string type rule
+	json_add_string proto udp
+	json_add_string src "*"
+	json_add_int dest_port 51819
+	json_add_string target ACCEPT
+	json_close_object
+
+	json_close_array
+	procd_close_data
+
 	procd_close_instance
 }




More information about the lede-commits mailing list