[package] libpcap: explicitely disable libnl support to prevent different build resul...

[openwrt.git] / package / firewall / files / lib / core.sh

diff --git a/package/firewall/files/lib/core.sh b/package/firewall/files/lib/core.sh
index c350e8f..93d4d2e 100644 (file)
--- a/package/firewall/files/lib/core.sh
+++ b/package/firewall/files/lib/core.sh
@@ -30,12 +30,12 @@ fw_start() {
        echo "Loading forwardings"
        config_foreach fw_load_forwarding forwarding
 
-       echo "Loading redirects"
-       config_foreach fw_load_redirect redirect
-
        echo "Loading rules"
        config_foreach fw_load_rule rule
 
+       echo "Loading redirects"
+       config_foreach fw_load_redirect redirect
+
        echo "Loading includes"
        config_foreach fw_load_include include
 
@@ -67,6 +67,12 @@ fw_stop() {
                        [ -n "$i" ] && env -i ACTION=remove ZONE="$z" \
                                INTERFACE="$n" DEVICE="$i" /sbin/hotplug-call firewall
                done
+
+               config_get i core "${z}_tcpmss"
+               [ "$i" == 1 ] && {
+                       fw del i m FORWARD zone_${z}_MSSFIX
+                       fw del i m zone_${z}_MSSFIX
+               }
        done
 
        fw_clear ACCEPT
@@ -107,10 +113,8 @@ fw_die() {
 
 fw_log() {
        local level="$1"
-       [ -n "$2" ] || {
-               shift
-               level=notice
-       }
+       [ -n "$2" ] && shift || level=notice
+       [ "$level" != error ] || echo "Error: $@" >&2
        logger -t firewall -p user.$level "$@"
 }