Ver código fonte

unetd: add firewall input rule for global port

Ensure that peers can be exchanged over any interface

Signed-off-by: Felix Fietkau <[email protected]>
Felix Fietkau 1 ano atrás
pai
commit
f8a16524c4
1 arquivos alterados com 15 adições e 0 exclusões
  1. 15 0
      package/network/services/unetd/files/unetd.init

+ 15 - 0
package/network/services/unetd/files/unetd.init

@@ -13,5 +13,20 @@ start_service() {
 	procd_set_param command "$PROG" -h /var/run/unetd/hosts -u /var/run/unetd/socket
 	procd_set_param respawn
 	procd_set_param limits core="unlimited"
+
+	procd_open_data
+	json_add_array firewall
+
+	json_add_object ""
+	json_add_string type rule
+	json_add_string proto udp
+	json_add_string src "*"
+	json_add_int dest_port 51819
+	json_add_string target ACCEPT
+	json_close_object
+
+	json_close_array
+	procd_close_data
+
 	procd_close_instance
 }