firewall: extend nat reflection support
authorJo-Philipp Wich <jow@openwrt.org>
Tue, 4 Dec 2012 15:24:21 +0000 (15:24 +0000)
committerJo-Philipp Wich <jow@openwrt.org>
Tue, 4 Dec 2012 15:24:21 +0000 (15:24 +0000)
commitb0ab057b7254649335bd2cbbaa1e2541fbe7be80
tree5c3f4bde9b6c471dab299b8acca2412230326684
parentb6f39ce33a905574b2e363cd2334f546398d3b13
firewall: extend nat reflection support

- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34472 3c298f89-4303-0410-b956-a3cf2f4a3e73
package/network/config/firewall/Makefile
package/network/config/firewall/files/reflection.hotplug