X-Git-Url: http://git.openwrt.org/?a=blobdiff_plain;f=root%2Fusr%2Fshare%2Ffirewall4%2Ftemplates%2Fruleset.uc;fp=root%2Fusr%2Fshare%2Ffirewall4%2Ftemplates%2Fruleset.uc;h=4210d64461f2861b6972b609a6e575111c26753f;hb=a5553dae70439c7e4fa910490fcf12a1ffff5bd2;hp=f7c93fc47077de547be0315c75db230a0a2fffea;hpb=19a8caf614ec338513e58535ea02c6ee52988170;p=project%2Ffirewall4.git diff --git a/root/usr/share/firewall4/templates/ruleset.uc b/root/usr/share/firewall4/templates/ruleset.uc index f7c93fc..4210d64 100644 --- a/root/usr/share/firewall4/templates/ruleset.uc +++ b/root/usr/share/firewall4/templates/ruleset.uc @@ -112,7 +112,7 @@ table inet fw4 { chain input { type filter hook input priority filter; policy {{ fw4.input_policy(true) }}; - iifname "lo" accept comment "!fw4: Accept traffic from loopback" + iif "lo" accept comment "!fw4: Accept traffic from loopback" {% fw4.includes('chain-prepend', 'input') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle inbound flows" @@ -154,7 +154,7 @@ table inet fw4 { chain output { type filter hook output priority filter; policy {{ fw4.output_policy(true) }}; - oifname "lo" accept comment "!fw4: Accept traffic towards loopback" + oif "lo" accept comment "!fw4: Accept traffic towards loopback" {% fw4.includes('chain-prepend', 'output') %} ct state vmap { established : accept, related : accept{% if (fw4.default_option("drop_invalid")): %}, invalid : drop{% endif %} } comment "!fw4: Handle outbound flows"