fix: remove input and output rules, let only forward
This commit is contained in:
1 parent
e444500175
commit
419a373e17
1 file changed
+3
-10
@@ -23,8 +23,6 @@ config_get USED_BYTES_FILE limitator used_bytes_file '/root/limitator/used_bytes
|
|||||||
config_get LOG_FILE limitator log_file '/root/limitator/log' # A persistent file to log.
|
config_get LOG_FILE limitator log_file '/root/limitator/log' # A persistent file to log.
|
||||||
config_get IPTABLES_CHAIN limitator iptables_chain 'LIMITATOR' # Name of iptables chain.
|
config_get IPTABLES_CHAIN limitator iptables_chain 'LIMITATOR' # Name of iptables chain.
|
||||||
config_get IPTABLES_FORWARD limitator iptables_forward 'forwarding_rule' # Name of iptables rule for forward.
|
config_get IPTABLES_FORWARD limitator iptables_forward 'forwarding_rule' # Name of iptables rule for forward.
|
||||||
config_get IPTABLES_INPUT limitator iptables_input 'input_rule' # Name of iptables rule for input.
|
|
||||||
config_get IPTABLES_OUTPUT limitator iptables_output 'output_rule' # Name of iptables rule for output.
|
|
||||||
|
|
||||||
get_saved_used_bytes(){
|
get_saved_used_bytes(){
|
||||||
local used_bytes
|
local used_bytes
|
||||||
@@ -116,13 +114,10 @@ reset_quota(){
|
|||||||
|
|
||||||
del_iptables_rule(){
|
del_iptables_rule(){
|
||||||
iptables --wait -F $IPTABLES_CHAIN
|
iptables --wait -F $IPTABLES_CHAIN
|
||||||
for chain_name in $IPTABLES_FORWARD $IPTABLES_INPUT $IPTABLES_OUTPUT
|
while true
|
||||||
do
|
do
|
||||||
while true
|
line=$(iptables --wait -L $IPTABLES_FORWARD|sed -e '1,2d'|grep -n $IPTABLES_CHAIN|head -1|cut -d : -f 1 2>/dev/null)
|
||||||
do
|
[ -n "$(echo $line|grep -E ^[[:digit:]]+$)" ] && iptables --wait -D $IPTABLES_FORWARD $line || break
|
||||||
line=$(iptables --wait -L $chain_name|sed -e '1,2d'|grep -n $IPTABLES_CHAIN|head -1|cut -d : -f 1 2>/dev/null)
|
|
||||||
[ -n "$(echo $line|grep -E ^[[:digit:]]+$)" ] && iptables --wait -D $chain_name $line || break
|
|
||||||
done
|
|
||||||
done
|
done
|
||||||
iptables --wait -D $IPTABLES_FORWARD 1
|
iptables --wait -D $IPTABLES_FORWARD 1
|
||||||
iptables --wait -X $IPTABLES_CHAIN
|
iptables --wait -X $IPTABLES_CHAIN
|
||||||
@@ -152,8 +147,6 @@ set_iptables_rule(){
|
|||||||
|
|
||||||
iptables --wait -I $IPTABLES_FORWARD 1 -d $INTRANET -s $INTRANET -j ACCEPT
|
iptables --wait -I $IPTABLES_FORWARD 1 -d $INTRANET -s $INTRANET -j ACCEPT
|
||||||
iptables -I $IPTABLES_FORWARD 2 -j $IPTABLES_CHAIN
|
iptables -I $IPTABLES_FORWARD 2 -j $IPTABLES_CHAIN
|
||||||
iptables -I $IPTABLES_INPUT -i $WAN_DEV ! -s $INTRANET -j $IPTABLES_CHAIN
|
|
||||||
iptables -I $IPTABLES_OUTPUT -o $WAN_DEV ! -d $INTRANET -j $IPTABLES_CHAIN
|
|
||||||
}
|
}
|
||||||
|
|
||||||
check_time_is_valid(){
|
check_time_is_valid(){
|
||||||
|
|||||||
Reference in new issue
Block a user