projects / project / firewall4.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 00fc694) | patch
config: drop to-be-forwarded-nowhere packets on wans
authorAndris PE <[email protected]>
Thu, 29 Feb 2024 14:17:03 +0000 (16:17 +0200)
committerJo-Philipp Wich <[email protected]>
Mon, 17 Mar 2025 15:46:41 +0000 (16:46 +0100)
commit97962771aa3c490d6186e64015f85dd66254fdf0
treeec84f4bed55e715d6d366d731e9bbc2d10996773tree | snapshot
parent00fc6943a29732375addf72a12f2381df5b25428commit | diff
config: drop to-be-forwarded-nowhere packets on wans

Dropping packets with no clear forward destination is nicer than rejecting
them. Especially when some providers punish users for spoofing caused by
their noisy infra.

Fixes: https://github.com/openwrt/openwrt/issues/13340
Signed-Off-By: Andris PE <[email protected]>
root/etc/config/firewall diff | blob | history
OpenWrt nftables firewall