commit 085e028855d59f2cbcfc079f4ac5dcb1b0b59cad parent 9a461f16e79dd90683928c2d54279bde51a23bd8 Author: Nikos Mavrogiannopoulos <nmav@gnutls.org> Date: Fri, 1 Aug 2014 20:58:46 +0200 ocserv: avoid setting up the firewall from ocserv.init Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> Diffstat:
| M | net/ocserv/files/ocserv.init | | | 26 | -------------------------- |
1 file changed, 0 insertions(+), 26 deletions(-)
diff --git a/net/ocserv/files/ocserv.init b/net/ocserv/files/ocserv.init @@ -4,30 +4,6 @@ SERVICE_USE_PID=1 START=50 -setup_firewall() { - local port fw - config_get port $1 port - test -z "$port" && return - - config_get fwport $1 fwport - test "$fwport" = "$port" && return - - logger -t ocserv "opening port $port..." - #can we remove the old rule? - uci add firewall rule - uci set firewall.@rule[-1].src=wan - uci set firewall.@rule[-1].name="ocserv-ext-port" - uci set firewall.@rule[-1].target=ACCEPT - uci set firewall.@rule[-1].proto=tcpudp - uci set firewall.@rule[-1].dest_port=$port - uci commit firewall - - uci set ocserv.config.fwport="$port" - uci commit ocserv - - /etc/init.d/firewall restart -} - setup_config() { config_get port $1 port "4443" config_get max_clients $1 max_clients "8" @@ -170,8 +146,6 @@ start() { chmod 600 /var/etc/ocpasswd config_foreach setup_users ocservusers - setup_firewall config - service_start /usr/sbin/ocserv -c /var/etc/ocserv.conf }