mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-23 22:58:52 +01:00
Error with ESTABLISHED/RELATED rules and FASTACCEPT
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3419 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
6879ce7084
commit
20d3f6afdc
@ -5205,6 +5205,7 @@ process_rule() # $1 = target
|
||||
|
||||
case $SECTION in
|
||||
ESTABLISHED|RELATED)
|
||||
[ -n "$FASTACCEPT" ] && fatal_error "Entries in the $SECTION SECTION of the rules file not permitted with FASTACCEPT=Yes"
|
||||
state="-m state --state $SECTION"
|
||||
;;
|
||||
*)
|
||||
|
@ -838,8 +838,8 @@ MAPOLDACTIONS=No
|
||||
#
|
||||
# If you set FASTACCEPT=Yes, then ESTABLISHED/RELATED packets are accepted
|
||||
# early in the INPUT, FORWARD and OUTPUT chains. If you set
|
||||
# FASTACCEPT=Yes then you may not specify ESTABLISHED policies in
|
||||
# /etc/shorewall/policy.
|
||||
# FASTACCEPT=Yes then you may not include rules in the ESTABLISHED and
|
||||
# RELATED sections of the rules file.
|
||||
|
||||
FASTACCEPT=No
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user