From fb018a829f154f8a354331d4cccbc5fb52edbc29 Mon Sep 17 00:00:00 2001 From: Vysakh A V Date: Wed, 23 Sep 2026 08:35:20 +0100 Subject: [PATCH] RDKB-66199: In coperate mesh baul firewall rules for XER2 (#428) Reason for change: Add meshbahul firewall rules for xer2 platform. Test Procedure:Make sure required iptable rules are applied for XER2. Priority:P1 Risks: Low Signed-off-by: Vysakh A V --- source/firewall/firewall.c | 2 +- source/firewall_nft/firewall_nft.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/source/firewall/firewall.c b/source/firewall/firewall.c index 5270bc07..41284aef 100644 --- a/source/firewall/firewall.c +++ b/source/firewall/firewall.c @@ -11376,7 +11376,7 @@ static int prepare_multinet_filter_forward (FILE *filter_fp) fprintf(filter_fp, "-A INPUT -i brlan113 -m pkttype ! --pkt-type unicast -j ACCEPT\n"); fprintf(filter_fp, "-A INPUT -i brebhaul -d 169.254.85.0/24 -j ACCEPT\n"); fprintf(filter_fp, "-A INPUT -i brebhaul -m pkttype ! --pkt-type unicast -j ACCEPT\n"); -#elif defined(_XB7_PRODUCT_REQ_) || defined (_CBR2_PRODUCT_REQ_) || defined(_SCXF11BFL_PRODUCT_REQ_) +#elif defined(_XB7_PRODUCT_REQ_) || defined (_CBR2_PRODUCT_REQ_) || defined(_SCXF11BFL_PRODUCT_REQ_) || defined(_XER2_PRODUCT_REQ_) fprintf(filter_fp, "-A INPUT -i brlan112 -d 169.254.0.0/24 -j ACCEPT\n"); fprintf(filter_fp, "-A INPUT -i brlan112 -m pkttype ! --pkt-type unicast -j ACCEPT\n"); fprintf(filter_fp, "-A FORWARD -i brlan112 -o erouter0 -j DROP\n"); diff --git a/source/firewall_nft/firewall_nft.c b/source/firewall_nft/firewall_nft.c index 45db8335..787ce394 100644 --- a/source/firewall_nft/firewall_nft.c +++ b/source/firewall_nft/firewall_nft.c @@ -10270,7 +10270,7 @@ static int prepare_multinet_filter_forward (FILE *filter_fp) fprintf(filter_fp, "add rule ip filter INPUT iifname brlan113 pkttype != unicast counter accept\n"); fprintf(filter_fp, "add rule ip filter INPUT iifname brebhaul ip daddr 169.254.85.0/24 counter accept\n"); fprintf(filter_fp, "add rule ip filter INPUT iifname brebhaul pkttype != unicast counter accept\n"); -#elif defined(_XB7_PRODUCT_REQ_) || defined (_CBR2_PRODUCT_REQ_) +#elif defined(_XB7_PRODUCT_REQ_) || defined (_CBR2_PRODUCT_REQ_) || defined(_XER2_PRODUCT_REQ_) fprintf(filter_fp, "add rule ip filter INPUT iifname brlan112 ip daddr 169.254.0.0/24 counter accept\n"); fprintf(filter_fp, "add rule ip filter INPUT iifname brlan112 pkttype != unicast counter accept\n");