[Cerowrt-devel] cerowrt-3.10.32-9 released
Toke Høiland-Jørgensen
toke at toke.dk
Mon Mar 17 10:39:35 EDT 2014
Toke Høiland-Jørgensen <toke at toke.dk> writes:
> So, not sure exactly how it's supposed to work; does this hook into the
> firewall after NAT'ing has been applied? Otherwise you'd presumably need
> to add exceptions for the configured internal network(s)? (I think that
> may be what is going on in the bcp script at ln 38, but some sort of
> auto-detection of the relevant network(s) would be needed? Or as a
> minimum a whitelist configuration option?)
Also, is there a reason you're not putting the contents of the ipset
into the firewall configuration file? Then you'd have the GUI sorted
(assuming there's LUCI support for ipset)...
-Toke
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 489 bytes
Desc: not available
URL: <https://lists.bufferbloat.net/pipermail/cerowrt-devel/attachments/20140317/4991908b/attachment.sig>
More information about the Cerowrt-devel
mailing list