mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-20 01:37:59 +02:00
Add a few more configuration files - which list they should be in is just a guess at this stage
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4115 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
29550e2b78
commit
33214aab85
@ -17,3 +17,5 @@
|
|||||||
rsync, ssh, and shorewall steps) is probably not worth the trouble to
|
rsync, ssh, and shorewall steps) is probably not worth the trouble to
|
||||||
code.
|
code.
|
||||||
|
|
||||||
|
- Automatic generation of firewall hosts & interfaces files.
|
||||||
|
|
||||||
|
@ -159,12 +159,47 @@ if (! -d $dir) {
|
|||||||
#
|
#
|
||||||
|
|
||||||
# Config files for which the host-specific file is included *first*
|
# Config files for which the host-specific file is included *first*
|
||||||
my @hostfirstconfigs = qw( blacklist bogons ecn hosts interfaces maclist
|
my @hostfirstconfigs = qw(
|
||||||
masq nat proxyarp rfc1918 routestopped start stop stopped tcrules tos
|
accounting
|
||||||
tunnels );
|
actions
|
||||||
|
blacklist
|
||||||
|
bogons
|
||||||
|
continue
|
||||||
|
ecn
|
||||||
|
hosts
|
||||||
|
interfaces
|
||||||
|
maclist
|
||||||
|
masq
|
||||||
|
nat
|
||||||
|
netmap
|
||||||
|
proxyarp
|
||||||
|
rfc1918
|
||||||
|
routestopped
|
||||||
|
route_rules
|
||||||
|
start
|
||||||
|
started
|
||||||
|
stop
|
||||||
|
stopped
|
||||||
|
tcclasses
|
||||||
|
tcdevices
|
||||||
|
tcrules
|
||||||
|
tos
|
||||||
|
tunnels
|
||||||
|
);
|
||||||
|
|
||||||
# Config files for which the host-specific file is included *last*
|
# Config files for which the host-specific file is included *last*
|
||||||
my @hostlastconfigs = qw( common init modules params shorewall.conf );
|
my @hostlastconfigs = qw(
|
||||||
|
common
|
||||||
|
configpath
|
||||||
|
init
|
||||||
|
initdone
|
||||||
|
ipsec
|
||||||
|
modules
|
||||||
|
params
|
||||||
|
providers
|
||||||
|
shorewall.conf
|
||||||
|
);
|
||||||
|
|
||||||
|
|
||||||
for my $conf (@hostfirstconfigs) {
|
for my $conf (@hostfirstconfigs) {
|
||||||
constructfile "$conf", "$dir/$conf", "$conf/$host", "$conf/COMMON";
|
constructfile "$conf", "$dir/$conf", "$conf/$host", "$conf/COMMON";
|
||||||
@ -306,7 +341,7 @@ for (stripfile $conf) {
|
|||||||
my ($src, $dst, $pol, $rest) = split /\s+/, $_, 4;
|
my ($src, $dst, $pol, $rest) = split /\s+/, $_, 4;
|
||||||
|
|
||||||
print "$src, $dst, $pol, $rest\n" if $DEBUG > 3;
|
print "$src, $dst, $pol, $rest\n" if $DEBUG > 3;
|
||||||
|
|
||||||
# Both source and destination zones must be valid on this host for this
|
# Both source and destination zones must be valid on this host for this
|
||||||
# policy to apply.
|
# policy to apply.
|
||||||
next unless defined $hostzones{$src} and defined $hostzones{$dst};
|
next unless defined $hostzones{$src} and defined $hostzones{$dst};
|
||||||
|
Loading…
x
Reference in New Issue
Block a user