extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-23 19:21:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Allow interface in tcrules DEST for CLASSIFY rules

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-11-04 21:35:56 +00:00
parent 10ce66aee8
commit 28969cdcf6
4 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall2/changelog.txt
View File

@ -126,3 +126,5 @@ Changes since 2.0.3
60) Restore missing '#' in the rfc1918 file. 60) Restore missing '#' in the rfc1918 file.
61) Add note for Slackware users to INSTALL. 61) Add note for Slackware users to INSTALL.
62) Allow interface in DEST tcrules column.

11
Shorewall2/firewall
View File

@ -2344,7 +2344,16 @@ process_tc_rule()
[ -n "$marktest" ] && r="${r}-m ${marktest}--mark $testval " [ -n "$marktest" ] && r="${r}-m ${marktest}--mark $testval "
[ "x$dest" = "x-" ] || r="${r}$(dest_ip_range $dest) " if [ "x$dest" != "x-" ]; then
case $dest in
*.*.*)
r="${r}$(dest_ip_range $dest) "
;;
*)
r="${r}$(match_dest_dev $dest) "
;;
esac
fi
if [ "x$proto" = xipp2p ]; then if [ "x$proto" = xipp2p ]; then
[ "x$port" = "x-" ] && port="ipp2p" [ "x$port" = "x-" ] && port="ipp2p"

5
Shorewall2/releasenotes.txt
View File

@ -523,7 +523,10 @@ New Features:
#MARK/ SOURCE DEST PROTO PORT(S) #MARK/ SOURCE DEST PROTO PORT(S)
#CLASSIFY #CLASSIFY
1:30 - - tcp 25 1:30 - eth0 tcp 25
Note that when using this form of rule, it is acceptable to include
the name of an interface in the DEST column.
Marking using the CLASSIFY target always occurs in the POSTROUTING Marking using the CLASSIFY target always occurs in the POSTROUTING
chain of the mangle table and is not affected by the setting of chain of the mangle table and is not affected by the setting of

4
Shorewall2/tcrules
View File

@ -92,6 +92,10 @@
# iptables include iprange match support, IP address # iptables include iprange match support, IP address
# ranges are also allowed. # ranges are also allowed.
# #
# If the MARK column specificies a classification of
# the form <major>:<minor> then this column may also
# contain an interface name.
#
# PROTO Protocol - Must be "tcp", "udp", "icmp", "ipp2p", # PROTO Protocol - Must be "tcp", "udp", "icmp", "ipp2p",
# a number, or "all". "ipp2p" requires ipp2p match # a number, or "all". "ipp2p" requires ipp2p match
# support in your kernel and iptables. # support in your kernel and iptables.