Browse Source

unetd: add firewall input rule for global port

Ensure that peers can be exchanged over any interface

Signed-off-by: Felix Fietkau <[email protected]>
(cherry picked from commit f8a16524c4a4070d61a32f6203ea5e26cea125d4)
Felix Fietkau 1 year ago
parent
commit
acf52fed43
1 changed files with 15 additions and 0 deletions
  1. 15 0
      package/network/services/unetd/files/unetd.init

+ 15 - 0
package/network/services/unetd/files/unetd.init

@@ -13,5 +13,20 @@ start_service() {
 	procd_set_param command "$PROG" -h /var/run/unetd/hosts -u /var/run/unetd/socket
 	procd_set_param respawn
 	procd_set_param limits core="unlimited"
+
+	procd_open_data
+	json_add_array firewall
+
+	json_add_object ""
+	json_add_string type rule
+	json_add_string proto udp
+	json_add_string src "*"
+	json_add_int dest_port 51819
+	json_add_string target ACCEPT
+	json_close_object
+
+	json_close_array
+	procd_close_data
+
 	procd_close_instance
 }