grase-www-portal
grase-www-portal copied to clipboard
Ensure Hotspot Server can communicate back to clients
While you can currently ping from the hotspot server to a client, you can't initiate a new connection to a client.
Something like the following allows those connections to work.
diff --git a/chilli/up.sh b/chilli/up.sh
index bf6fbda..9f2c9c4 100755
--- a/chilli/up.sh
+++ b/chilli/up.sh
@@ -47,7 +47,8 @@ then
ipt_in -p udp -d $ADDR --destination-port 67:68 -j ACCEPT
ipt_in -p udp --dst $ADDR --dport 53 -j ACCEPT
ipt_in -p icmp --dst $ADDR -j ACCEPT
-
+
+ ipt -A INPUT -i $TUNTAP -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
ipt -A INPUT -i $TUNTAP --dst $ADDR -j DROP
if [ "$ONLY8021Q" != "1" ]