Просмотр исходного кода

unetd: add firewall input rule for global port

Ensure that peers can be exchanged over any interface

Signed-off-by: Felix Fietkau <[email protected]>
Felix Fietkau 1 год назад
Родитель
Сommit
f8a16524c4
1 измененных файлов с 15 добавлено и 0 удалено
  1. 15 0
      package/network/services/unetd/files/unetd.init

+ 15 - 0
package/network/services/unetd/files/unetd.init

@@ -13,5 +13,20 @@ start_service() {
 	procd_set_param command "$PROG" -h /var/run/unetd/hosts -u /var/run/unetd/socket
 	procd_set_param command "$PROG" -h /var/run/unetd/hosts -u /var/run/unetd/socket
 	procd_set_param respawn
 	procd_set_param respawn
 	procd_set_param limits core="unlimited"
 	procd_set_param limits core="unlimited"
+
+	procd_open_data
+	json_add_array firewall
+
+	json_add_object ""
+	json_add_string type rule
+	json_add_string proto udp
+	json_add_string src "*"
+	json_add_int dest_port 51819
+	json_add_string target ACCEPT
+	json_close_object
+
+	json_close_array
+	procd_close_data
+
 	procd_close_instance
 	procd_close_instance
 }
 }