Author: cyrus
Date: 2015-07-24 12:00:45 +0200 (Fri, 24 Jul 2015)
New Revision: 46478

Modified:
   trunk/package/network/config/firewall/Makefile
   trunk/package/network/config/firewall/files/firewall.config
Log:
firewall: comply with REC-22, REC-24 of RFC 6092

Signed-off-by: Steven Barth <[email protected]>

Modified: trunk/package/network/config/firewall/Makefile
===================================================================
--- trunk/package/network/config/firewall/Makefile      2015-07-24 09:12:21 UTC 
(rev 46477)
+++ trunk/package/network/config/firewall/Makefile      2015-07-24 10:00:45 UTC 
(rev 46478)
@@ -8,7 +8,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=firewall
-PKG_VERSION:=2015-05-26
+PKG_VERSION:=2015-07-22
 PKG_RELEASE:=$(PKG_SOURCE_VERSION)
 
 PKG_SOURCE_PROTO:=git

Modified: trunk/package/network/config/firewall/files/firewall.config
===================================================================
--- trunk/package/network/config/firewall/files/firewall.config 2015-07-24 
09:12:21 UTC (rev 46477)
+++ trunk/package/network/config/firewall/files/firewall.config 2015-07-24 
10:00:45 UTC (rev 46478)
@@ -159,19 +159,18 @@
 #      option proto            tcp
 
 # allow IPsec/ESP and ISAKMP passthrough
-#config rule
-#      option src              wan
-#      option dest             lan
-#      option protocol         esp
-#      option target           ACCEPT
+config rule
+       option src              wan
+       option dest             lan
+       option protocol         esp
+       option target           ACCEPT
 
-#config rule
-#      option src              wan
-#      option dest             lan
-#      option src_port         500
-#      option dest_port        500
-#      option proto            udp
-#      option target           ACCEPT
+config rule
+       option src              wan
+       option dest             lan
+       option dest_port        500
+       option proto            udp
+       option target           ACCEPT
 
 ### FULL CONFIG SECTIONS
 #config rule
_______________________________________________
openwrt-commits mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-commits

Reply via email to