- Add apply-noreload command that skips firewall reload - Firewall include now uses apply-noreload to avoid loop - apply command still reloads firewall for manual use Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
17 lines
473 B
Bash
17 lines
473 B
Bash
#!/bin/sh
|
|
#
|
|
# SecuBox WAN Access - Firewall Include Script
|
|
# This script is called on every firewall reload to ensure WAN access rules persist
|
|
#
|
|
|
|
# Only run if secubox-wan-access exists
|
|
[ -x /usr/sbin/secubox-wan-access ] || exit 0
|
|
|
|
# Log the reload
|
|
logger -t secubox-wan "Firewall reload detected - reapplying WAN access rules"
|
|
|
|
# Apply WAN access rules from UCI config (noreload to avoid infinite loop)
|
|
/usr/sbin/secubox-wan-access apply-noreload >/dev/null 2>&1
|
|
|
|
exit 0
|