mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-20 01:37:59 +02:00
Add a catchall rule for old REJECT handling
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@539 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
a7cd930b96
commit
8b5cadbdff
@ -3308,12 +3308,12 @@ add_common_rules() {
|
|||||||
# Not all versions of iptables support these so don't complain if they don't work
|
# Not all versions of iptables support these so don't complain if they don't work
|
||||||
#
|
#
|
||||||
qt iptables -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable
|
qt iptables -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable
|
||||||
qt iptables -A reject -j REJECT --reject-with icmp-host-prohibited
|
if ! qt iptables -A reject -j REJECT --reject-with icmp-host-prohibited; then
|
||||||
#
|
#
|
||||||
# A catchall in case the above doesn't work
|
# In case the above doesn't work
|
||||||
#
|
#
|
||||||
run_iptables -A reject -j REJECT
|
run_iptables -A reject -j REJECT
|
||||||
|
fi
|
||||||
#
|
#
|
||||||
# dropunclean rules
|
# dropunclean rules
|
||||||
#
|
#
|
||||||
|
Loading…
x
Reference in New Issue
Block a user