Remove iptables 1.2.7 hacks

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@286 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-10-05 16:36:53 +00:00
parent ddc90ef2e0
commit 38e5f236dc

View File

@ -2906,8 +2906,7 @@ add_common_rules() {
logoptions="$LOGPARAMS --log-prefix Shorewall:badpkt:DROP:" logoptions="$LOGPARAMS --log-prefix Shorewall:badpkt:DROP:"
logoptions="$logoptions --log-level $LOGUNCLEAN --log-ip-options" logoptions="$logoptions --log-level $LOGUNCLEAN --log-ip-options"
run_iptables -A badpkt -p tcp -j LOG $logoptions --log-tcp-options run_iptables -A badpkt -p tcp -j LOG $logoptions --log-tcp-options
run_iptables -A badpkt -p tcp -j DROP # Workaround for iptables 1.2.7 run_iptables -A badpkt -p ! tcp -j LOG $logoptions
run_iptables -A badpkt -j LOG $logoptions
fi fi
run_iptables -A badpkt -j DROP run_iptables -A badpkt -j DROP
@ -2932,8 +2931,7 @@ add_common_rules() {
logoptions="$LOGPARAMS --log-prefix Shorewall:logpkt:LOG:" logoptions="$LOGPARAMS --log-prefix Shorewall:logpkt:LOG:"
logoptions="$logoptions --log-level $LOGUNCLEAN --log-ip-options" logoptions="$logoptions --log-level $LOGUNCLEAN --log-ip-options"
run_iptables -A logpkt -p tcp -j LOG $logoptions --log-tcp-options run_iptables -A logpkt -p tcp -j LOG $logoptions --log-tcp-options
run_iptables -A logpkt -p tcp -j RETURN # Workaround for iptables 1.2.7 run_iptables -A logpkt -p ! tcp -j LOG $logoptions
run_iptables -A logpkt -j LOG $logoptions
echo "Mangled/Invalid Packet Logging enabled on:" echo "Mangled/Invalid Packet Logging enabled on:"