Add support for CISCO kompartibles VPN (user by FRITZBox).
This commit is contained in:
@ -1961,6 +1961,35 @@ else
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - Cisco kompartibles VPN (FRITZ!Box)
|
||||
# ---
|
||||
|
||||
echononl "\t\tCisco VPN Service (FRITZ\!Box) only out"
|
||||
|
||||
if $allow_cisco_vpn_out && [[ ${#cisco_vpn_out_port_arr[@]} -gt 0 ]]; then
|
||||
for _dev in ${ext_if_arr[@]} ; do
|
||||
for _port in ${cisco_vpn_out_port_arr[@]} ; do
|
||||
$ipt -A OUTPUT -o $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then
|
||||
$ipt -A FORWARD -o $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
fi
|
||||
done
|
||||
done
|
||||
|
||||
for _vpn_if in ${vpn_if_arr[@]} ; do
|
||||
$ipt -A OUTPUT -o $_vpn_if -m conntrack --ctstate NEW -j ACCEPT
|
||||
if $kernel_activate_forwarding ; then
|
||||
$ipt -A FORWARD -o $_vpn_if -p $cisco_vpn_out_protocol -m conntrack --ctstate NEW -j ACCEPT
|
||||
fi
|
||||
done
|
||||
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - VPN Service only out
|
||||
# ---
|
||||
|
Reference in New Issue
Block a user