Don't allow PREROUTING CLASSIFY rules.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-12-28 14:07:12 -08:00
parent eda918215d
commit 8cdc83638e
3 changed files with 4 additions and 21 deletions

View File

@ -104,8 +104,7 @@ my %flow_keys = ( 'src' => 1,
'sk-gid' => 1,
'vlan-tag' => 1 );
my %designator = ( P => 'tcpre' ,
F => 'tcfor' ,
my %designator = ( F => 'tcfor' ,
T => 'tcpost' );
my %tosoptions = ( 'tos-minimize-delay' => '0x10/0x10' ,

View File

@ -205,7 +205,7 @@
<para>Beginning with Shorewall 4.4.27, the classid may be
optionally followed by ':' and a capital letter designating the
chain where classification is to occur. </para>
chain where classification is to occur.</para>
<variablelist>
<varlistentry>
@ -216,19 +216,11 @@
</listitem>
</varlistentry>
<varlistentry>
<term>P</term>
<listitem>
<para>PREROUTING chain.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>T</term>
<listitem>
<para>POSTROUTING chain.</para>
<para>POSTROUTING chain (default).</para>
</listitem>
</varlistentry>
</variablelist>

View File

@ -216,19 +216,11 @@
</listitem>
</varlistentry>
<varlistentry>
<term>P</term>
<listitem>
<para>PREROUTING chain.</para>
</listitem>
</varlistentry>
<varlistentry>
<term>T</term>
<listitem>
<para>POSTROUTING chain.</para>
<para>POSTROUTING chain (default).</para>
</listitem>
</varlistentry>
</variablelist>