From: Jo-Philipp Wich <jow@openwrt.org>
Date: Sat, 4 Sep 2010 17:49:14 +0000 (+0000)
Subject: firewall: add option to disable NAT reflection
X-Git-Tag: reboot~18985
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=f4ee14e1c3fcca9d5abf3f7c00855b645fb2d4ab;p=openwrt%2Fstaging%2Flynxis.git

firewall: add option to disable NAT reflection

SVN-Revision: 22908
---

diff --git a/package/firewall/files/reflection.hotplug b/package/firewall/files/reflection.hotplug
index dc6780a720..6b1cd60f28 100644
--- a/package/firewall/files/reflection.hotplug
+++ b/package/firewall/files/reflection.hotplug
@@ -53,6 +53,10 @@ if [ "$ACTION" = "add" ] && [ "$INTERFACE" = "wan" ]; then
 				local proto
 				config_get proto "$cfg" proto
 
+				local reflection
+				config_get_bool reflection "$cfg" reflection 1
+				[ "$reflection" == 1 ] || return
+
 				local epmin epmax extport
 				config_get extport "$cfg" src_dport
 				[ -n "$extport" ] || return