Lines Matching full:otbr
30 # Provides: otbr-firewall
37 # Short-Description: OTBR firewall
38 # Description: This service sets up firewall for OTBR.
59 ipset create -exist otbr-ingress-deny-src hash:net family inet6
60 ipset create -exist otbr-ingress-deny-src-swap hash:net family inet6
61 ipset create -exist otbr-ingress-allow-dst hash:net family inet6
62 ipset create -exist otbr-ingress-allow-dst-swap hash:net family inet6
68 ip6tables -A $OTBR_FORWARD_INGRESS_CHAIN -m set --match-set otbr-ingress-deny-src src -j DROP
69 ip6tables -A $OTBR_FORWARD_INGRESS_CHAIN -m set --match-set otbr-ingress-allow-dst dst -j ACCEPT
85 ipset_destroy_if_exist otbr-ingress-deny-src
86 ipset_destroy_if_exist otbr-ingress-deny-src-swap
87 ipset_destroy_if_exist otbr-ingress-allow-dst
88 ipset_destroy_if_exist otbr-ingress-allow-dst-swap