extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-30 01:19:36 +01:00
Code Issues Packages Projects Releases Wiki Activity

Handle mss in zones file

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6276 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-05-08 02:08:44 +00:00
parent 8385ebaa31
commit 8406623bcf
2 changed files with 46 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
Shorewall-perl/Shorewall/Chains.pm
View File

@ -83,6 +83,7 @@ our @EXPORT = qw( STANDARD
new_builtin_chain new_builtin_chain
initialize_chain_table initialize_chain_table
finish_section finish_section
setup_zone_mss
newexclusionchain newexclusionchain
clearrule clearrule
do_proto do_proto
@ -654,6 +655,47 @@ sub finish_section ( $ ) {
} }
} }
#
# Helper for set_mss
#
sub set_mss1( $$ ) {
my ( $chain, $mss ) = ($_[0], $_[1]);
my $chainref = ensure_chain 'filter', $chain;
my $policy = $chainref->{policy};
if ( "$policy" ne 'NONE' ) {
insert_rule $chainref, 1, "-p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $mss"
}
}
#
# Set up rules to set MSS to and/or from zone "$zone"
#
sub set_mss( $$$ ) {
my ( $zone, $mss, $direction) = @_;
for my $z ( @zones ) {
if ( $direction eq '_in' ) {
set_mss1 "${zone}2${z}" , $mss;
} elsif ( $direction eq '_out' ) {
set_mss1 "${z}2${zone}", $mss;
} else {
set_mss1 "${z}2${zone}", $mss;
set_mss1 "${zone}2${z}", $mss;
}
}
}
sub setup_zone_mss() {
for my $zone ( grep $zones{$_}{type} ne 'firewall' , @zones ) {
my $zoneref = $zones{$zone};
set_mss( $zone, $zoneref->{options}{in_out}{mss}, '' ) if $zoneref->{options}{in_out}{mss};
set_mss( $zone, $zoneref->{options}{in}{mss}, '_in' ) if $zoneref->{options}{in}{mss};
set_mss( $zone, $zoneref->{options}{out}{mss}, '_out' ) if $zoneref->{options}{out}{mss};
}
}
sub newexclusionchain() { sub newexclusionchain() {
my $seq = $exclseq++; my $seq = $exclseq++;
"excl${seq}"; "excl${seq}";

4
Shorewall-perl/compiler.pl
View File

@ -710,6 +710,10 @@ sub compiler( $ ) {
# #
setup_proxy_arp; setup_proxy_arp;
# #
# Handle MSS setings in the zones file
#
setup_zone_mss;
#
# [Re-]establish Routing # [Re-]establish Routing
# #
setup_providers; setup_providers;