From 02009ee0602ca49e62aa8703e6c11d0887bf7fac Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 5 Sep 2011 06:23:18 -0700 Subject: [PATCH] Set 'use_..._chain' on interfaces with sfilters Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/Misc.pm | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm index 5367ae11c..140218d3c 100644 --- a/Shorewall/Perl/Shorewall/Misc.pm +++ b/Shorewall/Perl/Shorewall/Misc.pm @@ -554,9 +554,11 @@ sub add_common_rules() { if ( @filters ) { add_ijump( $chainref , @ipsec ? 'j' : 'g' => $target1, imatch_source_net( $_ ), @ipsec ), $chainref->{filtered}++ for @filters; + $interfaceref->{options}{use_forward_chain} = 1; } elsif ( $interfaceref->{bridge} eq $interface ) { add_ijump( $chainref , @ipsec ? 'j' : 'g' => $target1, imatch_dest_dev( $interface ), @ipsec ), $chainref->{filtered}++ unless $interfaceref->{options}{routeback} || $interfaceref->{options}{routefilter} || $interfaceref->{physical} eq '+'; + $interfaceref->{options}{use_forward_chain} = 1; } add_ijump( $chainref, j => 'ACCEPT', state_imatch 'ESTABLISHED,RELATED' ), $chainref->{filtered}++ if $config{FASTACCEPT}; @@ -566,6 +568,7 @@ sub add_common_rules() { if ( @filters ) { add_ijump( $chainref , g => $target, imatch_source_net( $_ ), @ipsec ), $chainref->{filtered}++ for @filters; + $interfaceref->{options}{use_input_chain} = 1; } add_ijump( $chainref, j => 'ACCEPT', state_imatch 'ESTABLISHED,RELATED' ), $chainref->{filtered}++ if $config{FASTACCEPT};