Refine 'newnotsyn' option handling

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@599 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2003-06-18 19:24:16 +00:00
parent 5776740250
commit 045263c704

View File

@ -3374,6 +3374,11 @@ build_common_chain() {
if [ -n "$NEWNOTSYN" ]; then
run_iptables -A common -p tcp --tcp-flags ACK ACK -j ACCEPT
run_iptables -A common -p tcp --tcp-flags RST RST -j ACCEPT
else
for interface in `find_interfaces_by_option newnotsyn`; do
run_iptables -A common -i $interface -p tcp --tcp-flags ACK ACK -j ACCEPT
run_iptables -A common -i $interface -p tcp --tcp-flags RST RST -j ACCEPT
done
fi
#
# BROADCASTS