Update firewall.sh

FIx drop log spam after network is restored
Adamm00 · Nov 5, 2024 · 1040726 · 1040726
1 parent 801e90f
commit 1040726
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/firewall.sh b/firewall.sh
@@ -10,7 +10,7 @@
 #                                                                                                           #
 #                                 Router Firewall And Security Enhancements                                 #
 #                             By Adamm -  https://github.com/Adamm00/IPSet_ASUS                             #
-#                                            27/07/2024 - v7.6.3                                            #
+#                                            05/11/2024 - v7.6.4                                            #
 #############################################################################################################
 
 
@@ -563,6 +563,9 @@ Check_IPTables() {
 		if [ "$(nvram get fw_log_x)" = "drop" ] || [ "$(nvram get fw_log_x)" = "both" ] && [ "$loginvalid" = "enabled" ]; then
 			iptables -C logdrop -m state --state NEW -j LOG --log-prefix "[BLOCKED - INVALID] " --log-tcp-sequence --log-tcp-options --log-ip-options 2>/dev/null || fail="${fail}#24 "
 		fi
+		if [ "$(nvram get fw_log_x)" = "drop" ] || [ "$(nvram get fw_log_x)" = "both" ]; then
+			iptables -C logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options 2>/dev/null || fail="${fail}#25 "
+		fi
 	fi
 	if [ -n "$fail" ]; then return 1; fi
 }