From 32bd8895c1b31178b36e47091b01e9eb165f2875 Mon Sep 17 00:00:00 2001
From: Liangbin Lian <jjm2473@gmail.com>
Date: Fri, 8 Dec 2023 11:13:52 +0800
Subject: [PATCH] istoreos: default reject wan access due to security issue

but keep wan_drop for newbie users
---
 package/istoreos-files/files/etc/uci-defaults/09_istoreos | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/package/istoreos-files/files/etc/uci-defaults/09_istoreos b/package/istoreos-files/files/etc/uci-defaults/09_istoreos
index 209f087750..40cedc17e5 100644
--- a/package/istoreos-files/files/etc/uci-defaults/09_istoreos
+++ b/package/istoreos-files/files/etc/uci-defaults/09_istoreos
@@ -21,12 +21,15 @@ if [ ! -f /proc/device-tree/chosen/default-firewall ] || grep -qFw nas /proc/dev
         commit ucitrack
 EOF
 
+if grep -qFw nas /proc/device-tree/chosen/default-firewall; then
     WAN_ZONE=`uci show firewall | egrep '^firewall\.@zone\[\d+\]\.name=' | grep wan | head -n1 | head -c -12`
     uci -q batch <<-EOF >/dev/null
         del_list dockerd.firewall.blocked_interfaces=wan
         set ${WAN_ZONE}.input=ACCEPT
         commit firewall
 EOF
+fi
+
     if [ -e /etc/config/minidlna ]; then
         uci -q batch <<-EOF >/dev/null
             set minidlna.@minidlna[0].interface='br-lan,eth0'