From 961f3f5fa8797705051b01dea7b3bf7dc8d5aabf Mon Sep 17 00:00:00 2001
From: lmq8267 <119713693+lmq8267@users.noreply.github.com>
Date: Wed, 22 Jan 2025 21:39:50 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=E6=B5=81=E9=87=8F=E8=BD=AC?=
 =?UTF-8?q?=E5=8F=91=E7=9A=84=E8=AE=BF=E9=97=AE=E6=8E=A7=E5=88=B6=E9=80=89?=
 =?UTF-8?q?=E9=A1=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 root/etc/init.d/easytier | 48 ++++++++++++++++++++++++++++------------
 1 file changed, 34 insertions(+), 14 deletions(-)

diff --git a/root/etc/init.d/easytier b/root/etc/init.d/easytier
index 77ebc6d..30cbdc1 100644
--- a/root/etc/init.d/easytier
+++ b/root/etc/init.d/easytier
@@ -327,7 +327,7 @@ set_firewall() {
                        uci set network.EasyTier.ifname="$tunname"
 		fi
 		if [ -z "$(uci -q get firewall.easytierzone)" ];  then
-				echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 添加防火墙规则，放行网络接口 EasyTier 允许出入转发" >>/tmp/easytier.log
+				echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 添加防火墙规则，放行网络接口 EasyTier 允许出入转发，开启IP动态伪装 MSS钳制" >>/tmp/easytier.log
 				uci set firewall.easytierzone='zone'
 				uci set firewall.easytierzone.input='ACCEPT'
 				uci set firewall.easytierzone.output='ACCEPT'
@@ -337,19 +337,39 @@ set_firewall() {
 				uci set firewall.easytierzone.name='EasyTier'
 				uci set firewall.easytierzone.network='EasyTier'
 		fi
-		uci set firewall.easytierfwlan=forwarding
-		uci set firewall.easytierfwlan.dest='lan'
-		uci set firewall.easytierfwlan.src='EasyTier'
-                uci set firewall.easytierfwwan=forwarding
-		uci set firewall.easytierfwwan.dest='wan'
-		uci set firewall.easytierfwwan.src='EasyTier'
-                uci set firewall.lanfweasytier=forwarding
-		uci set firewall.lanfweasytier.dest='EasyTier'
-		uci set firewall.lanfweasytier.src='lan'
-                uci set firewall.wanfweasytier=forwarding
-		uci set firewall.wanfweasytier.dest='EasyTier'
-		uci set firewall.wanfweasytier.src='wan'
-	
+		et_forward="$(uci -q get easytier.@easytier[0].et_forward)"
+		if [ "${et_forward//etfwlan/}" != "$et_forward" ]; then
+			echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 允许从虚拟网络 EasyTier 到局域网 lan 的流量" >>/tmp/easytier.log
+			uci set firewall.easytierfwlan=forwarding
+			uci set firewall.easytierfwlan.dest='lan'
+			uci set firewall.easytierfwlan.src='EasyTier'
+		else
+			uci -q delete firewall.easytierfwlan
+		fi
+		if [ "${et_forward//etfwwan/}" != "$et_forward" ]; then
+			echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 允许从虚拟网络 EasyTier 到广域网 wan 的流量" >>/tmp/easytier.log
+			uci set firewall.easytierfwwan=forwarding
+			uci set firewall.easytierfwwan.dest='wan'
+			uci set firewall.easytierfwwan.src='EasyTier'
+		else
+			uci -q delete firewall.easytierfwwan
+		fi
+                if [ "${et_forward//lanfwet/}" != "$et_forward" ]; then
+			echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 允许从局域网 lan 到虚拟网络 EasyTier 的流量" >>/tmp/easytier.log
+			uci set firewall.lanfweasytier=forwarding
+			uci set firewall.lanfweasytier.dest='EasyTier'
+			uci set firewall.lanfweasytier.src='lan'
+		else
+			uci -q delete firewall.lanfweasytier
+		fi
+                if [ "${et_forward//wanfwet/}" != "$et_forward" ]; then
+			echo "$(date '+%Y-%m-%d %H:%M:%S') easytier : 允许从广域网 wan 到虚拟网络 EasyTier 的流量" >>/tmp/easytier.log
+			uci set firewall.wanfweasytier=forwarding
+			uci set firewall.wanfweasytier.dest='EasyTier'
+			uci set firewall.wanfweasytier.src='wan'
+		else
+			uci -q delete firewall.wanfweasytier
+		fi
 }
 
 start_et() {