|
@@ -27,11 +27,11 @@ mwan3_set_general_iptables()
|
27
|
27
|
$IPT -A mwan3_hook -m mark --mark 0x0/0xff00 -j mwan3_connected
|
28
|
28
|
$IPT -A mwan3_hook -m mark --mark 0x0/0xff00 -j mwan3_rules
|
29
|
29
|
$IPT -A mwan3_hook -j CONNMARK --save-mark --nfmask 0xff00 --ctmask 0xff00
|
|
30
|
+ $IPT -A mwan3_hook -m mark ! --mark 0xff00/0xff00 -j mwan3_connected
|
30
|
31
|
fi
|
31
|
32
|
|
32
|
33
|
if ! $IPT -S mwan3_output_hook &> /dev/null; then
|
33
|
34
|
$IPT -N mwan3_output_hook
|
34
|
|
- $IPT -A mwan3_output_hook -p icmp -m icmp --icmp-type 3 -j MARK --set-xmark 0xff00/0xff00
|
35
|
35
|
fi
|
36
|
36
|
|
37
|
37
|
if ! $IPT -S PREROUTING | grep mwan3_hook &> /dev/null; then
|
|
@@ -57,11 +57,11 @@ mwan3_set_connected_iptables()
|
57
|
57
|
$IPT -F mwan3_connected
|
58
|
58
|
|
59
|
59
|
for connected_networks in $($IP route | awk '{print $1}' | egrep '[0-9]{1,3}(\.[0-9]{1,3}){3}'); do
|
60
|
|
- $IPT -A mwan3_connected -d $connected_networks -m mark --mark 0x0/0xff00 -j MARK --set-xmark 0xff00/0xff00
|
|
60
|
+ $IPT -A mwan3_connected -d $connected_networks -j MARK --set-xmark 0xff00/0xff00
|
61
|
61
|
done
|
62
|
62
|
|
63
|
|
- $IPT -I mwan3_connected -d 224.0.0.0/3 -m mark --mark 0x0/0xff00 -j MARK --set-xmark 0xff00/0xff00
|
64
|
|
- $IPT -I mwan3_connected -d 127.0.0.0/8 -m mark --mark 0x0/0xff00 -j MARK --set-xmark 0xff00/0xff00
|
|
63
|
+ $IPT -I mwan3_connected -d 224.0.0.0/3 -j MARK --set-xmark 0xff00/0xff00
|
|
64
|
+ $IPT -I mwan3_connected -d 127.0.0.0/8 -j MARK --set-xmark 0xff00/0xff00
|
65
|
65
|
fi
|
66
|
66
|
}
|
67
|
67
|
|