extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-15 19:01:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix NONAT and NATONLY rules in an action

Browse Source
This commit is contained in:
Tom Eastep 2010-12-23 07:49:20 -08:00
parent 37a383ea4d
commit 8ad7300165
1 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
Shorewall/Perl/Shorewall/Rules.pm
View File

@ -833,17 +833,18 @@ sub process_rule_common ( $$$$$$$$$$$$$$$$ ) {
add_requiredby( $normalized_target , $inaction1 ); add_requiredby( $normalized_target , $inaction1 );
} else { } else {
if ( my $ref = use_action( $normalized_target ) ) { if ( my $ref = use_action( $normalized_target ) ) {
new_nat_chain $ref->{name} if $actiontype & ( NATRULE | NONAT ); new_nat_chain $ref->{name} if $actiontype & ( NATRULE | NONAT | NATONLY );
} }
} }
} }
# #
# Return the NAT-oriented flags to the caller who will eventually add them # Return the NATRULE flag to the caller who will eventually add it
# to $targets{$inaction1} # to $targets{$inaction1}
# #
return ( $actiontype & ( NATRULE | NONAT | NATONLY ) ) if $inaction1; if ( $inaction1 ) {
return ( $actiontype & ( NATRULE | NONAT | NATONLY ) ) ? NATRULE : 0;
}
# #
# Take care of irregular syntax and targets # Take care of irregular syntax and targets
# #
@ -878,8 +879,8 @@ sub process_rule_common ( $$$$$$$$$$$$$$$$ ) {
# #
# Isolate and validate source and destination zones # Isolate and validate source and destination zones
# #
my $sourcezone; my $sourcezone = '-';
my $destzone; my $destzone = '-';
my $sourceref; my $sourceref;
my $destref; my $destref;
my $origdstports; my $origdstports;
@ -949,11 +950,10 @@ sub process_rule_common ( $$$$$$$$$$$$$$$$ ) {
# #
# Take care of chain # Take care of chain
# #
unless ( $actiontype & NATONLY ) {
if ( $inaction3 ) { if ( $inaction3 ) {
$chain = $chainref->{name}; $chain = $chainref->{name};
} else { } else {
unless ( $actiontype & NATONLY ) {
# #
# Check for illegal bridge port rule # Check for illegal bridge port rule
# #