extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-24 14:39:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix MULTIPORT port forwarding

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@101 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-07-03 23:31:50 +00:00
parent 939750baa2
commit 750d40ce03
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Shorewall/firewall
View File

@ -1378,7 +1378,7 @@ delete_tc()
# dports = Destination Port Specification. 'dports' may be changed # # dports = Destination Port Specification. 'dports' may be changed #
# by this function # # by this function #
# cport = Source Port Specification # # cport = Source Port Specification #
# multioption = String to invoke multiport match if appropriate # # multiport = String to invoke multiport match if appropriate #
################################################################################ ################################################################################
add_nat_rule() { add_nat_rule() {
local chain local chain
@ -1423,7 +1423,7 @@ add_nat_rule() {
if [ "$source" = "$FW" ]; then if [ "$source" = "$FW" ]; then
run_iptables -t nat -A OUTPUT $proto $sports $addr \ run_iptables -t nat -A OUTPUT $proto $sports $addr \
$dports -j $target1 $multiport $dports -j $target1
else else
chain=$source chain=$source
@ -1436,13 +1436,13 @@ add_nat_rule() {
eval hosts=\$${z}_hosts eval hosts=\$${z}_hosts
for host in $hosts; do for host in $hosts; do
addnatrule $chain $proto -s ${host#*:} \ addnatrule $chain $proto -s ${host#*:} \
$sports $addr $dports -j RETURN $multiport $sports $addr $dports -j RETURN
done done
done done
fi fi
addnatrule $chain $proto $cli $sports \ addnatrule $chain $proto $cli $sports \
$addr $dports -j $target1 $multiport $addr $dports -j $target1
fi fi
# Replace destination port by the new destination port # Replace destination port by the new destination port
@ -1453,12 +1453,12 @@ add_nat_rule() {
if [ -n "$snat" ]; then if [ -n "$snat" ]; then
if [ -n "$cli" ]; then if [ -n "$cli" ]; then
run_iptables -t nat -A POSTROUTING $proto $cli \ run_iptables -t nat -A POSTROUTING $proto $cli $multiport \
$sports -d $serv $dports -j SNAT --to-source $snat $sports -d $serv $dports -j SNAT --to-source $snat
else else
for source_host in $source_hosts; do for source_host in $source_hosts; do
run_iptables -t nat -A POSTROUTING \ run_iptables -t nat -A POSTROUTING \
-s ${source_host#*:} $proto $sports \ -s ${source_host#*:} $proto $sports $multiport \
-d $serv $dports -j SNAT --to-source $snat -d $serv $dports -j SNAT --to-source $snat
done done
fi fi