extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-08-17 12:16:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

More optimization

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8124 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep
2008-01-30 18:47:27 +00:00
parent b81ae53477
commit 8ef198b3a6
2 changed files with 44 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
Shorewall-perl/Shorewall/Rules.pm
View File

@ -1556,6 +1556,7 @@ sub generate_matrix() {
} else {
$sourcechainref = $filter_table->{FORWARD};
$interfacematch = match_source_dev $interface;
move_rules( $filter_table->{forward_chain $interface} , $frwd_ref );
}
my $arrayref = $source_ref->{$interface};
@ -1668,6 +1669,8 @@ sub generate_matrix() {
add_rule( $outputref , join('', $interfacematch, '-d 255.255.255.255 ' , $ipsec_out_match, "-j $nextchain" ) )
if $hostref->{options}{broadcast};
move_rules( $filter_table->{output_chain $interface} , $filter_table->{$nextchain} ) unless use_output_chain $interface;
}
next if $hostref->{options}{destonly};
@ -1698,13 +1701,19 @@ sub generate_matrix() {
}
if ( $chain2 ) {
my $nextchain;
if ( @$exclusions ) {
my $input = zone_input_chain $zone;
add_rule $inputchainref, join( '', $interfacematch, $source, $ipsec_in_match, "-j $input" );
add_rule $filter_table->{ $input } , "-j $chain2";
$nextchain = $input;
} else {
add_rule $inputchainref, join( '', $interfacematch, $source, $ipsec_in_match, "-j $chain2" );
$nextchain = $chain2;
}
move_rules( $filter_table->{input_chain $interface} , $filter_table->{$nextchain} ) unless use_input_chain $interface;
}
if ( $hostref->{ipsec} ne 'ipsec' ) {
@ -1712,6 +1721,7 @@ sub generate_matrix() {
add_rule $filter_table->{forward_chain $interface} , join( '', $source, $ipsec_in_match. "-j $frwd_ref->{name}" );
} else {
add_rule $filter_table->{FORWARD} , join( '', match_source_dev( $interface ) , $source, $ipsec_in_match. "-j $frwd_ref->{name}" );
move_rules ( $filter_table->{forward_chain $interface} , $frwd_ref );
}
}
}