From 8ea5810bda601583a866ee0849f1bb188c08e5aa Mon Sep 17 00:00:00 2001 From: Matthias Schiffer Date: Tue, 26 Dec 2017 22:58:04 +0100 Subject: [PATCH] gluon-core: firewall: allow inbound ICMPv4 ping on local_node --- .../luasrc/lib/gluon/upgrade/140-firewall-rules | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules b/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules index c252aad4..7ebc80b5 100755 --- a/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules +++ b/package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules @@ -36,7 +36,17 @@ for _, zone in ipairs({ 'wan', 'local_client', 'mesh' }) do end --- allow icmp in/out/forward on all relevant zones +-- allow icmp in/out on all relevant zones +uci:section('firewall', 'rule', 'local_client_ICMPv4_in', { + src = 'local_client', + proto = 'icmp', + icmp_type = { + 'echo-request', + }, + family = 'ipv4', + target = 'ACCEPT', +}) + for _, zone in ipairs ({ 'mesh', 'local_client' } ) do uci:section('firewall', 'rule', zone .. '_ICMPv6_in', { src = zone,