chg: delete filter table CHAIN_LOCKED chain

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
This commit is contained in:
Dengfeng Liu 2023-01-11 03:28:41 +00:00
parent 7d92ac8a6f
commit 9767dce0a7
2 changed files with 0 additions and 6 deletions

View File

@ -861,7 +861,6 @@ iptables_fw_init(void)
iptables_do_append_command(handle, "-t filter -N " CHAIN_TO_INTERNET);
iptables_do_append_command(handle, "-t filter -N " CHAIN_AUTHSERVERS);
iptables_do_append_command(handle, "-t filter -N " CHAIN_DOMAIN_TRUSTED);
iptables_do_append_command(handle, "-t filter -N " CHAIN_LOCKED);
iptables_do_append_command(handle, "-t filter -N " CHAIN_GLOBAL);
iptables_do_append_command(handle, "-t filter -N " CHAIN_VALIDATE);
iptables_do_append_command(handle, "-t filter -N " CHAIN_KNOWN);
@ -881,8 +880,6 @@ iptables_fw_init(void)
iptables_do_append_command(handle, "-t filter -A " CHAIN_TO_INTERNET
" -o %s -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu", ext_interface);
iptables_do_append_command(handle, "-t filter -A " CHAIN_TO_INTERNET " -m mark --mark 0x%x0000/0xff0000 -j " CHAIN_LOCKED, FW_MARK_LOCKED);
iptables_load_ruleset("filter", FWRULESET_LOCKED_USERS, CHAIN_LOCKED, handle);
iptables_do_append_command(handle, "-t filter -A " CHAIN_TO_INTERNET " -j " CHAIN_AUTHSERVERS);
iptables_fw_set_authservers(handle);
@ -1004,7 +1001,6 @@ iptables_fw_destroy(void)
iptables_do_command("-t filter -F " CHAIN_TO_INTERNET);
iptables_do_command("-t filter -F " CHAIN_AUTHSERVERS);
iptables_do_command("-t filter -F " CHAIN_DOMAIN_TRUSTED);
iptables_do_command("-t filter -F " CHAIN_LOCKED);
iptables_do_command("-t filter -F " CHAIN_GLOBAL);
iptables_do_command("-t filter -F " CHAIN_VALIDATE);
iptables_do_command("-t filter -F " CHAIN_KNOWN);
@ -1014,7 +1010,6 @@ iptables_fw_destroy(void)
iptables_do_command("-t filter -X " CHAIN_TO_INTERNET);
iptables_do_command("-t filter -X " CHAIN_AUTHSERVERS);
iptables_do_command("-t filter -X " CHAIN_DOMAIN_TRUSTED);
iptables_do_command("-t filter -X " CHAIN_LOCKED);
iptables_do_command("-t filter -X " CHAIN_GLOBAL);
iptables_do_command("-t filter -X " CHAIN_VALIDATE);
iptables_do_command("-t filter -X " CHAIN_KNOWN);

View File

@ -48,7 +48,6 @@
#define CHAIN_VALIDATE "WiFiDog_$ID$_Validate"
#define CHAIN_KNOWN "WiFiDog_$ID$_Known"
#define CHAIN_UNKNOWN "WiFiDog_$ID$_Unknown"
#define CHAIN_LOCKED "WiFiDog_$ID$_Locked"
#define CHAIN_TRUSTED "WiFiDog_$ID$_Trusted"
#define CHAIN_TRUSTED_LOCAL "WiFiDog_$ID$_TLocal"
#define CHAIN_AUTH_IS_DOWN "WiFiDog_$ID$_AuthIsDown"