#!/bin/sh
[ -z "${IPKG_INSTROOT}" ] || exit 0

# 添加 UU 防火墙 zone
uci -q get firewall.uu_zone || {
    uci set firewall.uu_zone=zone
    uci set firewall.uu_zone.name='UU'
    uci set firewall.uu_zone.input='ACCEPT'
    uci set firewall.uu_zone.output='ACCEPT'
    uci set firewall.uu_zone.forward='ACCEPT'
    uci set firewall.uu_zone.device='tun16+'
}

# 添加 lan 到 UU 的 forwarding
uci -q get firewall.uu_forwarding || {
    uci set firewall.uu_forwarding=forwarding
    uci set firewall.uu_forwarding.src='lan'
    uci set firewall.uu_forwarding.dest='UU'
}

# 添加 UU 到 lan 的 forwarding
uci -q get firewall.uu_reverse_forwarding || {
    uci set firewall.uu_reverse_forwarding=forwarding
    uci set firewall.uu_reverse_forwarding.src='UU'
    uci set firewall.uu_reverse_forwarding.dest='lan'
}

# 应用配置
uci commit firewall
/etc/init.d/firewall reload >/dev/null 2>&1
exit 0
