extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-24 11:41:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Clarify GATEWAY ZONE in tunnels file

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3324 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-01-19 16:04:07 +00:00
parent e67a511817
commit 65165f429a
2 changed files with 5 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Shorewall/firewall
View File

@ -2378,7 +2378,7 @@ setup_tunnels() # $1 = name of tunnels file
progress_message " OPENVPN client tunnel to $1:$protocol:$p defined." progress_message " OPENVPN client tunnel to $1:$protocol:$p defined."
} }
setup_one_generic() # $1 = gateway, $2 = kind:protocol[:port], $3 = Gateway Zone setup_one_generic() # $1 = gateway, $2 = kind:protocol[:port]
{ {
local protocol local protocol
local p= local p=
@ -2403,16 +2403,6 @@ setup_tunnels() # $1 = name of tunnels file
addrule2 $inchain -p $protocol $(source_ip_range $1) $p -j ACCEPT addrule2 $inchain -p $protocol $(source_ip_range $1) $p -j ACCEPT
addrule2 $outchain -p $protocol $(dest_ip_range $1) $p -j ACCEPT addrule2 $outchain -p $protocol $(dest_ip_range $1) $p -j ACCEPT
for z in $(separate_list $3); do
if validate_zone $z; then
addrule ${FW}2${z} -p $protocol $p -j ACCEPT
addrule ${z}2${FW} -p $protocol $p -j ACCEPT
else
error_message "WARNING: Invalid gateway zone ($z)" \
" -- Tunnel \"$tunnel\" may encounter problems"
fi
done
progress_message " GENERIC tunnel to $1:$p defined." progress_message " GENERIC tunnel to $1:$p defined."
} }
@ -2457,7 +2447,7 @@ setup_tunnels() # $1 = name of tunnels file
setup_one_openvpn_server $gateway $kind setup_one_openvpn_server $gateway $kind
;; ;;
generic:*|GENERIC:*) generic:*|GENERIC:*)
setup_one_generic $gateway $kind $z1 setup_one_generic $gateway $kind
;; ;;
*) *)
error_message "WARNING: Tunnels of type $kind are not supported:" \ error_message "WARNING: Tunnels of type $kind are not supported:" \

4
Shorewall/tunnels
View File

@ -55,7 +55,9 @@
# column is a standalone host then this column should # column is a standalone host then this column should
# contain a comma-separated list of the names of the # contain a comma-separated list of the names of the
# zones that the host might be in. This column only # zones that the host might be in. This column only
# applies to IPSEC and generic tunnels. # applies to IPSEC tunnels where it enables ISAKMP
# traffic to flow through the tunnel to the remote
# gateway.
# #
# Example 1: # Example 1:
# #