projects / project / firewall4.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 38889b7) | patch
fw4.uc: do not skip defaults with invalid option
authorStijn Tintel <[email protected]>
Thu, 25 Nov 2021 03:41:16 +0000 (05:41 +0200)
committerStijn Tintel <[email protected]>
Thu, 6 Jan 2022 12:49:15 +0000 (14:49 +0200)
commit31c7550efcb8d1f6014202a257fc1b9e3ab5fc9e
tree03c646b6e2d7f23485f3740955e098e6fd450f70tree | snapshot
parent38889b77cc6f59eefd640b19f33e55efb53965aacommit | diff
fw4.uc: do not skip defaults with invalid option

Skipping a defaults section because it contains invalid options can be a
security risk. If the user configures a default policy to DROP or
REJECT, this should always be applied. The user is warned about the
invalid option anyway.

This makes firewall4 behave like firewall3 with regards to defaults.

Signed-off-by: Stijn Tintel <[email protected]>
Reviewed-by: Jo-Philipp Wich <[email protected]>
root/usr/share/ucode/fw4.uc diff | blob | history
OpenWrt nftables firewall