extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-02-21 12:11:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update some comments in the Rules module

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5760 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-03-30 18:55:49 +00:00
parent f69be4124c
commit 7b0c6cb3b6
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
New/Shorewall/Rules.pm
View File

@ -1242,7 +1242,7 @@ sub process_rules() {
# The biggest disadvantage of the zone-policy-rule model used by Shorewall is that it doesn't scale well as the number of zones increases (Order N**2 where N = number of zones). # The biggest disadvantage of the zone-policy-rule model used by Shorewall is that it doesn't scale well as the number of zones increases (Order N**2 where N = number of zones).
# A major goal of the rewrite of the compiler in Perl was to restrict those scaling effects to this functions and the rules that it generates. # A major goal of the rewrite of the compiler in Perl was to restrict those scaling effects to this functions and the rules that it generates.
# #
# The function traverses the full "source-zone X destination-zone" matrix and generates the rules necessary to direct traffic through the right set of rules. # The function traverses the full "source-zone X destination-zone" matrix and generates the rules necessary to direct traffic through the right set of filter-table rules.
# #
sub generate_matrix() { sub generate_matrix() {
# #
@ -1304,15 +1304,15 @@ sub generate_matrix() {
} }
} }
#
# Generate_Matrix() Starts Here
#
my $prerouting_rule = 1; my $prerouting_rule = 1;
my $postrouting_rule = 1; my $postrouting_rule = 1;
my $exclusion_seq = 1; my $exclusion_seq = 1;
my %chain_exclusions; my %chain_exclusions;
my %policy_exclusions; my %policy_exclusions;
#
# Generate_Matrix() Starts Here
#
for my $interface ( @interfaces ) { for my $interface ( @interfaces ) {
addnatjump 'POSTROUTING' , snat_chain( $interface ), "-o $interface "; addnatjump 'POSTROUTING' , snat_chain( $interface ), "-o $interface ";
} }