瀏覽代碼

gluon-core: firewall: allow inbound ICMPv4 ping on local_node

Matthias Schiffer 6 年之前
父節點
當前提交
8ea5810bda
共有 1 個文件被更改,包括 11 次插入1 次删除
  1. 11 1
      package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules

+ 11 - 1
package/gluon-core/luasrc/lib/gluon/upgrade/140-firewall-rules

@@ -36,7 +36,17 @@ for _, zone in ipairs({ 'wan', 'local_client', 'mesh' }) do
 end
 
 
--- allow icmp in/out/forward on all relevant zones
+-- allow icmp in/out on all relevant zones
+uci:section('firewall', 'rule',  'local_client_ICMPv4_in', {
+	src = 'local_client',
+	proto = 'icmp',
+	icmp_type = {
+		'echo-request',
+	},
+	family = 'ipv4',
+	target = 'ACCEPT',
+})
+
 for _, zone in ipairs ({ 'mesh', 'local_client' } ) do
 	uci:section('firewall', 'rule',  zone .. '_ICMPv6_in', {
 		src = zone,