From 5565446b518b4e5fc70677170991856075cf8f98 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lauri=20V=C3=B5sandi?= <lauri.vosandi@gmail.com>
Date: Thu, 17 May 2018 13:20:07 +0000
Subject: [PATCH] builder: masq flag is associated with zone, not interface

---
 doc/builder/mfp.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/builder/mfp.sh b/doc/builder/mfp.sh
index 66e0d0f..60d89a3 100644
--- a/doc/builder/mfp.sh
+++ b/doc/builder/mfp.sh
@@ -27,7 +27,6 @@ uci set dhcp.lan.limit=1
 uci set network.vpn=interface
 uci set network.vpn.ifname='ipsec0'
 uci set network.vpn.proto='none'
-uci set network.vpn.masq='1'
 
 uci set firewall.vpn=zone
 uci set firewall.vpn.name="vpn"
@@ -35,6 +34,7 @@ uci set firewall.vpn.input="ACCEPT"
 uci set firewall.vpn.forward="ACCEPT"
 uci set firewall.vpn.output="ACCEPT"
 uci set firewall.vpn.network="vpn"
+uci set firewall.vpn.masq='1'
 
 uci set firewall.lan2vpn=forwarding
 uci set firewall.lan2vpn.src='lan'