fix: disable lan for output network interface

This commit is contained in:
divocat
2025-10-23 12:23:45 +03:00
parent b5eec292e0
commit a2eac6f103
2 changed files with 9 additions and 2 deletions

View File

@@ -2534,8 +2534,8 @@ async function runNftCheck() {
throw new Error("Nftables checks failed"); throw new Error("Nftables checks failed");
} }
const data = nftablesChecks.data; const data = nftablesChecks.data;
const allGood = Boolean(data.table_exist) && Boolean(data.rules_mangle_exist) && Boolean(data.rules_mangle_counters) && Boolean(data.rules_mangle_output_exist) && Boolean(data.rules_mangle_output_counters) && Boolean(data.rules_proxy_exist) && Boolean(data.rules_proxy_counters) && Boolean(data.rules_other_mark_exist); const allGood = Boolean(data.table_exist) && Boolean(data.rules_mangle_exist) && Boolean(data.rules_mangle_counters) && Boolean(data.rules_mangle_output_exist) && Boolean(data.rules_mangle_output_counters) && Boolean(data.rules_proxy_exist) && Boolean(data.rules_proxy_counters) && !data.rules_other_mark_exist;
const atLeastOneGood = Boolean(data.table_exist) || Boolean(data.rules_mangle_exist) || Boolean(data.rules_mangle_counters) || Boolean(data.rules_mangle_output_exist) || Boolean(data.rules_mangle_output_counters) || Boolean(data.rules_proxy_exist) || Boolean(data.rules_proxy_counters) || Boolean(data.rules_other_mark_exist); const atLeastOneGood = Boolean(data.table_exist) || Boolean(data.rules_mangle_exist) || Boolean(data.rules_mangle_counters) || Boolean(data.rules_mangle_output_exist) || Boolean(data.rules_mangle_output_counters) || Boolean(data.rules_proxy_exist) || Boolean(data.rules_proxy_counters) || !data.rules_other_mark_exist;
function getStatus() { function getStatus() {
if (allGood) { if (allGood) {
return "success"; return "success";

View File

@@ -147,6 +147,13 @@ function createSettingsContent(section) {
return false; return false;
} }
// Reject lan*
if (
value.startsWith("lan")
) {
return false;
}
// Reject tun*, wg*, vpn*, awg*, oc* // Reject tun*, wg*, vpn*, awg*, oc*
if ( if (
value.startsWith("tun") || value.startsWith("tun") ||