extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-22 13:39:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

More routestopped fixes

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8997 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-12-11 22:55:21 +00:00
parent 7ebb79b53e
commit 00fb21b9b1
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Shorewall-perl/Shorewall/Rules.pm
View File

@ -454,6 +454,8 @@ sub process_routestopped() {
push @allhosts, @hosts;
}
my $tool = $family == F_IPV4 ? '$IPTABLES' : '$IP6TABLES';
for my $host ( @allhosts ) {
my ( $interface, $h ) = split /\|/, $host;
my $source = match_source_net $h;
@ -461,18 +463,18 @@ sub process_routestopped() {
my $sourcei = match_source_dev $interface;
my $desti = match_dest_dev $interface;
emit "\$IPTABLES -A INPUT $sourcei $source -j ACCEPT";
emit "\$IPTABLES -A OUTPUT $desti $dest -j ACCEPT" unless $config{ADMINISABSENTMINDED};
emit "$tool -A INPUT $sourcei $source -j ACCEPT";
emit "$tool -A OUTPUT $desti $dest -j ACCEPT" unless $config{ADMINISABSENTMINDED};
my $matched = 0;
if ( $source{$host} ) {
emit "\$IPTABLES -A FORWARD $sourcei $source -j ACCEPT";
emit "$tool -A FORWARD $sourcei $source -j ACCEPT";
$matched = 1;
}
if ( $dest{$host} ) {
emit "\$IPTABLES -A FORWARD $desti $dest -j ACCEPT";
emit "$tool -A FORWARD $desti $dest -j ACCEPT";
$matched = 1;
}
@ -482,7 +484,7 @@ sub process_routestopped() {
my ( $interface1, $h1 ) = split /:/, $host1;
my $dest1 = match_dest_net $h1;
my $desti1 = match_dest_dev $interface1;
emit "\$IPTABLES -A FORWARD $sourcei $desti1 $source $dest1 -j ACCEPT";
emit "$tool -A FORWARD $sourcei $desti1 $source $dest1 -j ACCEPT";
clearrule;
}
}