fix: when deny a client, delete its both src and dst connection

Signed-off-by: Dengfeng Liu <[email protected]>
liudf0716 · Sep 26, 2024 · ff01ca4 · ff01ca4
1 parent d007144
commit ff01ca4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/fw4_nft.c b/src/fw4_nft.c
@@ -483,6 +483,7 @@ nft_fw_access(fw_access_t type, const char *ip, const char *mac, int tag)
             nft_fw_del_rule_by_ip_and_mac(ip, NULL, "mangle_postrouting_wifidogx_incoming");
             if (config->enable_del_conntrack) {
                 run_cmd("conntrack -D -s %s", ip);
+                run_cmd("conntrack -D -d %s", ip);
             }
             break;
         default: