Add a catchall rule for old REJECT handling

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@539 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2003-04-16 16:54:46 +00:00
parent a7cd930b96
commit 8b5cadbdff

View File

@ -3308,12 +3308,12 @@ add_common_rules() {
# Not all versions of iptables support these so don't complain if they don't work # Not all versions of iptables support these so don't complain if they don't work
# #
qt iptables -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable qt iptables -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable
qt iptables -A reject -j REJECT --reject-with icmp-host-prohibited if ! qt iptables -A reject -j REJECT --reject-with icmp-host-prohibited; then
# #
# A catchall in case the above doesn't work # In case the above doesn't work
# #
run_iptables -A reject -j REJECT run_iptables -A reject -j REJECT
fi
# #
# dropunclean rules # dropunclean rules
# #