gluon-core: firewall: make the default input policy REJECT

Fixes #1311
This commit is contained in:
Matthias Schiffer 2018-01-17 09:40:03 +01:00
parent a32fddf38c
commit 01336f70ec
No known key found for this signature in database
GPG Key ID: 16EF3F64CB201D9C

View File

@ -3,6 +3,10 @@
local uci = require('simple-uci').cursor()
local defaults = uci:get_first('firewall', 'defaults')
uci:set('firewall', defaults, 'input', 'REJECT')
local function reject_input_on_wan(zone)
if zone.name == 'wan' then
uci:set('firewall', zone['.name'], 'input', 'REJECT')