提交 af5594c8 编写于 作者: S Stefan Berger 提交者: Stefan Berger

nwfilter: fix typing error in filter

Fix a typing error in the no-ip-spoofing filter.
Return DHCP request packets passing through this filter. Have
the user use another filter to actually allow DHCP requests to be
sent (action='accept').
上级 450c927d
<filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
<!-- allow DHCP requests -->
<rule action='accept' direction='out' priority='100'>
<ip srcipaddr='0.0.0.0' protocol='udp' srcportstart='68' srcportend='68'/>
<!-- allow UDP sent from 0.0.0.0 (DHCP); filter more exact later -->
<rule action='return' direction='out' priority='100'>
<ip srcipaddr='0.0.0.0' protocol='udp'/>
</rule>
<!-- allow all known IP addresses -->
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册