- # if there is bridge splitting this workaround works too
- for iface in $LAN; do
- iptables -A FORWARD -i $iface -o $iface -j ACCEPT
- [ -z "$WAN" ] || iptables -A FORWARD -i $iface -o $WAN -j ACCEPT
- done
+ iptables -A FORWARD -i br0 -o br0 -j ACCEPT
+ [ -z "$WAN" ] || iptables -A FORWARD -i $iface -o $WAN -j ACCEPT
+