luci-app-passwall2: sync upstream

last commit: 17bbfc50b5

luci-app-passwall2/root/usr/share/passwall2/app.sh

@@ -1121,27 +1121,32 @@ acl_app() {
 
 			[ "$enabled" = "1" ] || continue
 
-			for s in $sources; do
+			if [ -n "${sources}" ]; then
-				local s2
+				for s in $sources; do
-				is_iprange=$(lua_api "iprange(\"${s}\")")
+					local s2
-				if [ "${is_iprange}" = "true" ]; then
+					is_iprange=$(lua_api "iprange(\"${s}\")")
-					s2="iprange:${s}"
+					if [ "${is_iprange}" = "true" ]; then
-				elif [ -n "$(echo ${s} | grep '^ipset:')" ]; then
+						s2="iprange:${s}"
-					s2="ipset:${s}"
+					elif [ -n "$(echo ${s} | grep '^ipset:')" ]; then
-				else
+						s2="ipset:${s}"
-					_ip_or_mac=$(lua_api "ip_or_mac(\"${s}\")")
+					else
-					if [ "${_ip_or_mac}" = "ip" ]; then
+						_ip_or_mac=$(lua_api "ip_or_mac(\"${s}\")")
-						s2="ip:${s}"
+						if [ "${_ip_or_mac}" = "ip" ]; then
-					elif [ "${_ip_or_mac}" = "mac" ]; then
+							s2="ip:${s}"
-						s2="mac:${s}"
+						elif [ "${_ip_or_mac}" = "mac" ]; then
+							s2="mac:${s}"
+						fi
 					fi
-				fi
+					[ -n "${s2}" ] && source_list="${source_list}\n${s2}"
-				[ -n "${s2}" ] && source_list="${source_list}\n${s2}"
+					unset s2
-				unset s2
+				done
-			done
+			else
+				source_list="any"
+			fi
 
-			mkdir -p $TMP_ACL_PATH/$sid
+			local acl_path=${TMP_ACL_PATH}/$sid
-			[ ! -z "${source_list}" ] && echo -e "${source_list}" | sed '/^$/d' > $TMP_ACL_PATH/$sid/source_list
+			mkdir -p ${acl_path}
+			[ -n "${source_list}" ] && echo -e "${source_list}" | sed '/^$/d' > ${acl_path}/source_list
 
 			node=${node:-default}
 			tcp_no_redir_ports=${tcp_no_redir_ports:-default}

luci-app-passwall2/root/usr/share/passwall2/iptables.sh

@@ -329,6 +329,8 @@ load_acl() {
 					[ -z "${device}" ] && device="${interface}"
 					_ipt_source="-i ${device} "
 					msg="源接口【${device}】，"
+				else
+					msg="源接口【所有】，"
 				fi
 				if [ -n "$(echo ${i} | grep '^iprange:')" ]; then
 					_iprange=$(echo ${i} | sed 's#iprange:##g')
@@ -357,6 +359,8 @@ load_acl() {
 					_ipt_source=$(factor ${_mac} "${_ipt_source}-m mac --mac-source")
 					msg="${msg}MAC【${_mac}】，"
 					unset _mac
+				elif [ -n "$(echo ${i} | grep '^any')" ]; then
+					msg="${msg}所有设备，"
 				else
 					continue
 				fi

luci-app-passwall2/root/usr/share/passwall2/nftables.sh

@@ -384,6 +384,8 @@ load_acl() {
 					[ -z "${device}" ] && device="${interface}"
 					_ipt_source="iifname ${device} "
 					msg="源接口【${device}】，"
+				else
+					msg="源接口【所有】，"
 				fi
 				if [ -n "$(echo ${i} | grep '^iprange:')" ]; then
 					_iprange=$(echo ${i} | sed 's#iprange:##g')
@@ -405,6 +407,8 @@ load_acl() {
 					_ipt_source=$(factor ${_mac} "${_ipt_source}ether saddr")
 					msg="${msg}MAC【${_mac}】，"
 					unset _mac
+				elif [ -n "$(echo ${i} | grep '^any')" ]; then
+					msg="${msg}所有设备，"
 				else
 					continue
 				fi