firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Its now possible to define port range at 'Allow extern service from given local network' instead of a single port.

Browse Source
This commit is contained in:
Christoph
2026-03-03 15:50:51 +01:00
parent a5b226284a
commit 1f5c01d8c9
4 changed files with 36 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
conf/main_ipv4.conf.sample
View File

@@ -378,9 +378,11 @@ allow_local_if_to_ext_net=""
# -
# - All traffic from the given (local) network to the given (extern) service is allowed
# -
# - It's possible to give a port range. use the hyphen as the connecting character, like '3306-3308'
# -
# - Example:
# - allow_local_net_to_ext_service="192.168.63.0/24:83.223.86.98:3306:tcp
# - 192.168.64.0/24:83.223.86.98:3306:tcp"
# - 192.168.64.0/24:83.223.86.98:3306-3308:tcp"
# -
# - Blank separated list
# -

7
conf/main_ipv6.conf.sample
View File

@@ -363,9 +363,12 @@ allow_local_if_to_ext_net=""
# -
# - All traffic from the given (local) network to the given (extern) service is allowed
# -
# - It's possible to givbe a port range like '3306:3308"
# -
# - Example:
# - allow_local_net_to_ext_service="2003:ec:df10:49fd:fd34:b41c:c667:fe79/64,2a01:30:0:13:211:84ff:feb7:7f9c,3306,tcp
# - 2003:ec:df10:49fe:ec4:7aff:feac:5ece/64,2a01:30:0:13:211:84ff:feb7:7f9c,3306,tcp"
# - allow_local_net_to_ext_service="
# - 2003:ec:df10:49fd:fd34:b41c:c667:fe79/64,2a01:30:0:13:211:84ff:feb7:7f9c,3306,tcp
# - 2003:ec:df10:49fe:ec4:7aff:feac:5ece/64,2a01:30:0:13:211:84ff:feb7:7f9c,3306:3308,tcp"
# -
# - Blank separated list
# -