Changeset 18954

Timestamp:

04/08/12 13:19:19 (14 months ago)

Author:

BrainSlayer

Message:

create these tables only if neccessary

File:

• src/router/services/networking/firewall.c (modified) (1 diff)

src/router/services/networking/firewall.c

@@ -2545 +2545 @@
         }
 #ifndef HAVE_MICRO
-        save2file(":logbrute - [0:0]\n");
-        save2file("-A logbrute -m recent --set --name BRUTEFORCE --rsource\n");
-        save2file
-            ("-A logbrute -m recent ! --update --seconds 60 --hitcount 4 --name BRUTEFORCE --rsource -j RETURN\n");
-        // -m limit rule is a fallback in case -m recent isn't included in a build
-        save2file
-            ("-A logbrute -m limit --limit 1/min --limit-burst 1 -j RETURN\n");
-        if ((nvram_match("log_enable", "1"))
-            && (nvram_match("log_dropped", "1")))
+        if (nvram_match("limit_pptp", "1") || nvram_match("limit_ssh", "1")
+            || nvram_match("limit_telnet", "1")) {
+                save2file(":logbrute - [0:0]\n");
                 save2file
-                    ("-A logbrute -j LOG --log-prefix \"[DROP BRUTEFORCE] : \" --log-tcp-options --log-ip-options\n");
-        save2file("-A logbrute -j %s\n", log_drop);
+                    ("-A logbrute -m recent --set --name BRUTEFORCE --rsource\n");
+                save2file
+                    ("-A logbrute -m recent ! --update --seconds 60 --hitcount 4 --name BRUTEFORCE --rsource -j RETURN\n");
+                // -m limit rule is a fallback in case -m recent isn't included in a build
+                save2file
+                    ("-A logbrute -m limit --limit 1/min --limit-burst 1 -j RETURN\n");
+                if ((nvram_match("log_enable", "1"))
+                    && (nvram_match("log_dropped", "1")))
+                        save2file
+                            ("-A logbrute -j LOG --log-prefix \"[DROP BRUTEFORCE] : \" --log-tcp-options --log-ip-options\n");
+                save2file("-A logbrute -j %s\n", log_drop);
+        }
 #endif
         if (nvram_match("chilli_enable", "1")) {