firewall: comply with REC-22, REC-24 of RFC 6092

Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@46507 3c298f89-4303-0410-b956-a3cf2f4a3e73

firewall: comply with REC-22, REC-24 of RFC 6092
549b92d1 · cyrus · 4992a95a · 549b92d1 · 549b92d1
Commit 549b92d1 authored Jul 27, 2015 by cyrus
Hide whitespace changes
Inline Side-by-side

Showing with 12 additions and 13 deletions

Makefile package/network/config/firewall/Makefile +1 -1

firewall.config package/network/config/firewall/files/firewall.config +11 -12

No files found.
--- a/package/network/config/firewall/Makefile
+++ b/package/network/config/firewall/Makefile
@@ -8,7 +8,7 @@
 include $(TOPDIR)/rules.mk

 PKG_NAME:=firewall
-PKG_VERSION:=2015-05-26
+PKG_VERSION:=2015-07-22
 PKG_RELEASE:=$(PKG_SOURCE_VERSION)

 PKG_SOURCE_PROTO:=git

--- a/package/network/config/firewall/files/firewall.config
+++ b/package/network/config/firewall/files/firewall.config
@@ -159,19 +159,18 @@ config include
 #	option proto		tcp

 # allow IPsec/ESP and ISAKMP passthrough
-#config rule
-#	option src		wan
-#	option dest		lan
-#	option protocol		esp
-#	option target		ACCEPT
+config rule
+	option src		wan
+	option dest		lan
+	option protocol		esp
+	option target		ACCEPT

-#config rule
-#	option src		wan
-#	option dest		lan
-#	option src_port		500
-#	option dest_port	500
-#	option proto		udp
-#	option target		ACCEPT
+config rule
+	option src		wan
+	option dest		lan
+	option dest_port	500
+	option proto		udp
+	option target		ACCEPT

 ### FULL CONFIG SECTIONS
 #config rule