Fix some bugs in Tuomas's patch

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1772 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-11-26 23:33:32 +00:00
parent 86b2044f29
commit 86cf128a9f
3 changed files with 6 additions and 1 deletions

View File

@ -150,3 +150,5 @@ Changes since 2.0.3
72) Apply Tuomas Jormola's IPTABLES patch. 72) Apply Tuomas Jormola's IPTABLES patch.
73) Fixed some bugs in Tuomas's patch. 73) Fixed some bugs in Tuomas's patch.
74) Correct bug in "shorewall add"

View File

@ -1756,7 +1756,7 @@ setup_ipsec() {
set_mss1() # $1 = chain, $2 = MSS set_mss1() # $1 = chain, $2 = MSS
{ {
eval local policy=\$${1}_policy eval local policy=\$${1}_policy
if [ "$policy" != NONE ]; then if [ "$policy" != NONE -a "$COMMAND" != add ]; then
ensurechain $1 ensurechain $1
run_iptables -I $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $2 run_iptables -I $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $2
fi fi

View File

@ -138,6 +138,9 @@ Problems corrected since 2.2.0 Beta 5:
1) Many problems associated with an empty IPTABLES variable have been 1) Many problems associated with an empty IPTABLES variable have been
corrected. corrected.
2) A 'chain already exists' error occurs on "shorewall add" if you are
using the 'mss' option in the ipsec file.
----------------------------------------------------------------------- -----------------------------------------------------------------------
Issues when migrating from Shorewall 2.0 to Shorewall 2.1: Issues when migrating from Shorewall 2.0 to Shorewall 2.1: