From 9e56e257263cd0ae46a81a7f8038ee5b052632c4 Mon Sep 17 00:00:00 2001
From: Shibby <shibby@openlinksys.info>
Date: Fri, 16 May 2014 11:19:12 +0200
Subject: [PATCH] Add gui for Comcast DSCP fix.

Author: lancethepants
https://github.com/Victek/Tomato-RAF/commit/ef8358d5600cc3c1e44708e5d7af129dba1781f2
---
 release/src/router/httpd/tomato.c            | 1 +
 release/src/router/nvram/defaults.c          | 1 +
 release/src/router/rc/firewall.c             | 8 +++++---
 release/src/router/www/advanced-firewall.asp | 7 +++++--
 4 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/release/src/router/httpd/tomato.c b/release/src/router/httpd/tomato.c
index c764c2edc4..f1d4fb9a1d 100644
--- a/release/src/router/httpd/tomato.c
+++ b/release/src/router/httpd/tomato.c
@@ -759,6 +759,7 @@ static const nvset_t nvset_list[] = {
 	{ "udpxy_port",			V_RANGE(0, 65535)		},
 	{ "nf_loopback",		V_NUM				},
 	{ "ne_syncookies",		V_01				},
+	{ "DSCP_fix_enable",		V_01				},
 	{ "ne_snat",			V_01				},
 	{ "dhcp_pass",			V_01				},
 #ifdef TCONFIG_EMF
diff --git a/release/src/router/nvram/defaults.c b/release/src/router/nvram/defaults.c
index fb6d620d4e..1f9707709e 100644
--- a/release/src/router/nvram/defaults.c
+++ b/release/src/router/nvram/defaults.c
@@ -455,6 +455,7 @@ const defaults_t defaults[] = {
 	{ "udpxy_clients",		"3"				},
 	{ "udpxy_port",			"4022"				},
 	{ "ne_syncookies",		"0"				},	// tcp_syncookies
+	{ "DSCP_fix_enable",		"1"				},	// Comacst DSCP fix
 	{ "ne_snat",			"0"				},	// use SNAT instead of MASQUERADE
 	{ "dhcp_pass",			"1"				},	// allow DHCP responses
 	{ "ne_shlimit",			"1,3,60"			},	//shibby - enable limit connection attempts for sshd
diff --git a/release/src/router/rc/firewall.c b/release/src/router/rc/firewall.c
index 3401414786..1e69ab2354 100644
--- a/release/src/router/rc/firewall.c
+++ b/release/src/router/rc/firewall.c
@@ -637,12 +637,14 @@ static void mangle_table(void)
 #endif
 		}
 // Reset Incoming DSCP to 0x00
+		if (nvram_match("DSCP_fix_enable", "1")) {
 #ifdef LINUX26
-		modprobe("xt_DSCP");
+			modprobe("xt_DSCP");
 #else
-		modprobe("ipt_DSCP");
+			modprobe("ipt_DSCP");
 #endif
-		ipt_write("-I PREROUTING -i %s -j DSCP --set-dscp 0\n", wanface);
+			ipt_write("-I PREROUTING -i %s -j DSCP --set-dscp 0\n", wanface);
+		}
 	}
 
 	ip46t_write("COMMIT\n");
diff --git a/release/src/router/www/advanced-firewall.asp b/release/src/router/www/advanced-firewall.asp
index 8f0b96012a..aab36cd89f 100644
--- a/release/src/router/www/advanced-firewall.asp
+++ b/release/src/router/www/advanced-firewall.asp
@@ -26,7 +26,7 @@
 
 <script type='text/javascript'>
 
-//	<% nvram("block_wan,block_wan_limit,block_wan_limit_icmp,block_wan_limit_tr,nf_loopback,ne_syncookies,multicast_pass,multicast_lan,multicast_lan1,multicast_lan2,multicast_lan3,lan_ifname,lan1_ifname,lan2_ifname,lan3_ifname,udpxy_enable,udpxy_stats,udpxy_clients,udpxy_port,ne_snat"); %>
+//	<% nvram("block_wan,block_wan_limit,block_wan_limit_icmp,block_wan_limit_tr,nf_loopback,ne_syncookies,DSCP_fix_enable,multicast_pass,multicast_lan,multicast_lan1,multicast_lan2,multicast_lan3,lan_ifname,lan1_ifname,lan2_ifname,lan3_ifname,udpxy_enable,udpxy_stats,udpxy_clients,udpxy_port,ne_snat"); %>
 
 function verifyFields(focused, quiet)
 {
@@ -76,6 +76,7 @@ function save()
 	fom.block_wan_limit_tr.value = E('_f_icmp_limit_traceroute').value;
 
 	fom.ne_syncookies.value = E('_f_syncookies').checked ? 1 : 0;
+	fom.DSCP_fix_enable.value = E('_f_DSCP_fix_enable').checked ? 1 : 0;
 	fom.multicast_pass.value = E('_f_multicast').checked ? 1 : 0;
 	fom.multicast_lan.value = E('_f_multicast_lan').checked ? 1 : 0;
 	fom.multicast_lan1.value = E('_f_multicast_lan1').checked ? 1 : 0;
@@ -111,6 +112,7 @@ function save()
 <input type='hidden' name='block_wan_limit_icmp'>
 <input type='hidden' name='block_wan_limit_tr'>
 <input type='hidden' name='ne_syncookies'>
+<input type='hidden' name='DSCP_fix_enable'>
 <input type='hidden' name='multicast_pass'>
 <input type='hidden' name='multicast_lan'>
 <input type='hidden' name='multicast_lan1'>
@@ -130,7 +132,8 @@ createFieldTable('', [
 	{ title: 'ICMP', indent: 2, name: 'f_icmp_limit_icmp', type: 'text', maxlen: 3, size: 3, suffix: ' <small> request per second</small>', value: fixInt(nvram.block_wan_limit_icmp || 1, 1, 300, 5) },
 	{ title: 'Traceroute', indent: 2, name: 'f_icmp_limit_traceroute', type: 'text', maxlen: 3, size: 3, suffix: ' <small> request per second</small>', value: fixInt(nvram.block_wan_limit_tr || 5, 1, 300, 5) },
 	null,
-	{ title: 'Enable SYN cookies', name: 'f_syncookies', type: 'checkbox', value: nvram.ne_syncookies != '0' }
+	{ title: 'Enable SYN cookies', name: 'f_syncookies', type: 'checkbox', value: nvram.ne_syncookies != '0' },
+	{ title: 'Enable DSCP Fix', name: 'f_DSCP_fix_enable', type: 'checkbox', value: nvram.DSCP_fix_enable != '0', suffix: ' <small>Fixes Comcast incorrect DSCP</small>' }
 ]);
 </script>
 </div>
-- 
2.11.4.GIT