mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-23 16:13:18 +01:00
Ignore default route when detecting masq networks; refuse to start with ipchains module loaded
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@497 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
0d7c31371a
commit
8918a72c13
@ -2700,8 +2700,12 @@ get_routed_subnets() # $1 = interface name
|
||||
|
||||
ip route show dev $1 2> /dev/null |
|
||||
while read address rest; do
|
||||
[ "$address" = "${address%/*}" ] && address="${address}/32"
|
||||
echo $address
|
||||
if [ "x$address" = xdefault ]; then
|
||||
error_message "Warning: default route ignored on interface $1"
|
||||
else
|
||||
[ "$address" = "${address%/*}" ] && address="${address}/32"
|
||||
echo $address
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
@ -3010,6 +3014,9 @@ verify_os_version() {
|
||||
startup_error "Shorewall version $version does not work with kernel version $osversion"
|
||||
;;
|
||||
esac
|
||||
|
||||
[ -n "`lsmod 2> /dev/null | grep '^ipchains'`" ] && \
|
||||
startup_error "Shorewall can't start with the ipchains kernel module loaded - see FAQ #8"
|
||||
}
|
||||
|
||||
#
|
||||
|
Loading…
Reference in New Issue
Block a user