firewall: extend nat reflection support
authorJo-Philipp Wich <jow@openwrt.org>
Tue, 4 Dec 2012 15:24:21 +0000 (15:24 +0000)
committerJo-Philipp Wich <jow@openwrt.org>
Tue, 4 Dec 2012 15:24:21 +0000 (15:24 +0000)
commit6504b268b310890815a161c9163c7fa8056fe1d7
treee4a48d62251eb6135a365e444e333f378f7ed1b5
parentd9d0814fc2378f4c8ba28e43f4c61c36e92f9d06
firewall: extend nat reflection support

- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down

SVN-Revision: 34472
package/network/config/firewall/Makefile
package/network/config/firewall/files/reflection.hotplug