firewall: various enhancements
authorJo-Philipp Wich <jow@openwrt.org>
Mon, 4 Feb 2013 14:38:33 +0000 (14:38 +0000)
committerJo-Philipp Wich <jow@openwrt.org>
Mon, 4 Feb 2013 14:38:33 +0000 (14:38 +0000)
commite106f25ee74804478470a075cf7181bd995b9c33
treed9160d4a882b4eae2cc6533f5ff0b5727942c450
parent8506964e6d6f89ae67951d0eafe4717b63b1f610
firewall: various enhancements

- reduce mssfix related log spam (#10681)
- separate src and dest terminal chains (#11453, #12945)
- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
package/network/config/firewall/Makefile
package/network/config/firewall/files/lib/core_forwarding.sh
package/network/config/firewall/files/lib/core_init.sh
package/network/config/firewall/files/lib/core_interface.sh
package/network/config/firewall/files/lib/core_redirect.sh
package/network/config/firewall/files/lib/core_rule.sh
package/network/config/firewall/files/lib/fw.sh