mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-16 03:10:39 +01:00
Support 2.6 compressed modules; add chain name to policy display in 'check' command
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@662 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
88e1eb7e4d
commit
0c8365f7bb
@ -45,3 +45,7 @@ Changes since 1.4.5
|
|||||||
19. Fixed handling of excluded zone processing in DNAT and REDIRECT
|
19. Fixed handling of excluded zone processing in DNAT and REDIRECT
|
||||||
rules (re-added the protocol to the rule). Fixed parsing of exclude
|
rules (re-added the protocol to the rule). Fixed parsing of exclude
|
||||||
zones.
|
zones.
|
||||||
|
|
||||||
|
20. Display policy chain along with policy in 'check' command.
|
||||||
|
|
||||||
|
21. Support Linux 2.6 compressed modules.
|
@ -697,7 +697,7 @@ validate_policy()
|
|||||||
[ $1 = $2 ] || \
|
[ $1 = $2 ] || \
|
||||||
[ $1 = all ] || \
|
[ $1 = all ] || \
|
||||||
[ $2 = all ] || \
|
[ $2 = all ] || \
|
||||||
echo " Policy for $1 to $2 is $policy"
|
echo " Policy for $1 to $2 is $policy using chain $chain"
|
||||||
}
|
}
|
||||||
|
|
||||||
all_policy_chains=
|
all_policy_chains=
|
||||||
@ -2707,6 +2707,12 @@ loadmodule() # $1 = module name, $2 - * arguments
|
|||||||
if [ -f $modulefile ]; then
|
if [ -f $modulefile ]; then
|
||||||
insmod $modulefile $*
|
insmod $modulefile $*
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
modulefile=${modulefile}.ko
|
||||||
|
|
||||||
|
if [ -f $modulefile ]; then
|
||||||
|
insmod $modulefile $*
|
||||||
|
fi
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -162,3 +162,17 @@ New Features:
|
|||||||
Example:
|
Example:
|
||||||
|
|
||||||
foo eth1:192.168.1.0/24,192.168.2.0/24
|
foo eth1:192.168.1.0/24,192.168.2.0/24
|
||||||
|
|
||||||
|
11) The "shorewall check" command now includes the chain name when
|
||||||
|
printing the applicable policy for each pair of zones.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
Policy for dmz to net is REJECT using chain all2all
|
||||||
|
|
||||||
|
This means that the policy for connections from the dmz to the
|
||||||
|
internet is REJECT and the applicable entry in the
|
||||||
|
/etc/shorewall/policy was the all->all policy.
|
||||||
|
|
||||||
|
12) Support for the 2.6 Kernel series has been added.
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user