Changeset 909 for trunk/Modules/NetworkConfigRouterOS/Generators/FirewallMangle.php

Timestamp:

May 3, 2021, 9:48:26 PM (3 years ago)

Author:

chronos

Message:

• Added: Support for customer address places.
• Added: Limit direct traffic to router.

File:

• trunk/Modules/NetworkConfigRouterOS/Generators/FirewallMangle.php (modified) (1 diff)

trunk/Modules/NetworkConfigRouterOS/Generators/FirewallMangle.php

@@ -238 +238 @@
     $this->ProcessNode($AddressTree);
 
+    // Limit direct input/output traffic to gateway
+    $PacketMark = GetMarkByComment('rt-gateway-3-out');
+    $ItemsFirewall[] = array('chain' => 'output', 'out-interface' => $InetInterface, 'action' => 'mark-packet', 'new-packet-mark' => $PacketMark, 'comment' => 'local-out',);
+    $PacketMark = GetMarkByComment('rt-gateway-3-in');
+    $ItemsFirewall[] = array('chain' => 'input', 'in-interface' => $InetInterface, 'action' => 'mark-packet', 'new-packet-mark' => $PacketMark, 'comment' => 'local-in',);
+
     // Limited free internet
     $PacketMark = GetMarkByComment('free-out');