mirror of
https://gitlab.com/shorewall/code.git
synced 2025-01-23 14:08:45 +01:00
Restore physdev capability test
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4287 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
33e12529e1
commit
109affced3
@ -2213,13 +2213,11 @@ setup_ipsec() {
|
|||||||
|
|
||||||
do_options() # $1 = _in, _out or "" - $2 = option list
|
do_options() # $1 = _in, _out or "" - $2 = option list
|
||||||
{
|
{
|
||||||
local option opts newoptions= val
|
local option newoptions= val
|
||||||
|
|
||||||
[ x${2} = x- ] && return
|
[ x${2} = x- ] && return
|
||||||
|
|
||||||
opts=$(separate_list $2)
|
for option in $(separate_list $2); do
|
||||||
|
|
||||||
for option in $opts; do
|
|
||||||
val=${option#*=}
|
val=${option#*=}
|
||||||
|
|
||||||
case $option in
|
case $option in
|
||||||
|
@ -1219,7 +1219,7 @@ determine_capabilities() {
|
|||||||
qt $IPTABLES -A fooX1234 -p tcp -m multiport --dports 21:22 -j ACCEPT && XMULTIPORT=Yes
|
qt $IPTABLES -A fooX1234 -p tcp -m multiport --dports 21:22 -j ACCEPT && XMULTIPORT=Yes
|
||||||
qt $IPTABLES -A fooX1234 -m policy --pol ipsec --mode tunnel --dir in -j ACCEPT && POLICY_MATCH=Yes
|
qt $IPTABLES -A fooX1234 -m policy --pol ipsec --mode tunnel --dir in -j ACCEPT && POLICY_MATCH=Yes
|
||||||
|
|
||||||
if qt $IPTABLES -A fooX1234 -m physdev --physdev-out eth0 -j ACCEPT; then
|
if qt $IPTABLES -A fooX1234 -m physdev --physdev-in eth0 -j ACCEPT; then
|
||||||
PHYSDEV_MATCH=Yes
|
PHYSDEV_MATCH=Yes
|
||||||
qt $IPTABLES -A fooX1234 -m physdev --physdev-in eth1 -m physdev --physdev-out eth1 -j ACCEPT && KLUDGEFREE=Yes
|
qt $IPTABLES -A fooX1234 -m physdev --physdev-in eth1 -m physdev --physdev-out eth1 -j ACCEPT && KLUDGEFREE=Yes
|
||||||
fi
|
fi
|
||||||
|
Loading…
Reference in New Issue
Block a user