[Cerowrt-devel] cerowrt-3.10.32-9 released

Toke Høiland-Jørgensen toke at toke.dk
Mon Mar 17 10:39:35 EDT 2014


Toke Høiland-Jørgensen <toke at toke.dk> writes:

> So, not sure exactly how it's supposed to work; does this hook into the
> firewall after NAT'ing has been applied? Otherwise you'd presumably need
> to add exceptions for the configured internal network(s)? (I think that
> may be what is going on in the bcp script at ln 38, but some sort of
> auto-detection of the relevant network(s) would be needed? Or as a
> minimum a whitelist configuration option?)

Also, is there a reason you're not putting the contents of the ipset
into the firewall configuration file? Then you'd have the GUI sorted
(assuming there's LUCI support for ipset)...

-Toke
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 489 bytes
Desc: not available
URL: <https://lists.bufferbloat.net/pipermail/cerowrt-devel/attachments/20140317/4991908b/attachment.sig>


More information about the Cerowrt-devel mailing list