diff --git a/Shorewall6/lib.base b/Shorewall6/lib.base index e2a8da809..c25bea42c 100644 --- a/Shorewall6/lib.base +++ b/Shorewall6/lib.base @@ -735,6 +735,7 @@ determine_capabilities() { CONNLIMIT_MATCH= TIME_MATCH= GOTO_TARGET= + IPMARK_TARGET= chain=fooX$$ @@ -828,6 +829,7 @@ determine_capabilities() { fi qt $IP6TABLES -t mangle -A $chain -j CLASSIFY --set-class 1:1 && CLASSIFY_TARGET=Yes + qt $IP6TABLES -t mangle -A $chain -j IPMARK --addr src && IPMARK_TARGET=Yes qt $IP6TABLES -t mangle -F $chain qt $IP6TABLES -t mangle -X $chain qt $IP6TABLES -t mangle -L FORWARD -n && MANGLE_FORWARD=Yes @@ -919,6 +921,7 @@ report_capabilities() { report_capability "Connlimit Match" $CONNLIMIT_MATCH report_capability "Time Match" $TIME_MATCH report_capability "Goto Support" $GOTO_TARGET + report_capability "IPMARK Target" $IPMARK_TARGET fi [ -n "$PKTTYPE" ] || USEPKTTYPE= @@ -972,6 +975,7 @@ report_capabilities1() { report_capability1 CONNLIMIT_MATCH report_capability1 TIME_MATCH report_capability1 GOTO_TARGET + report_capability1 IPMARK_TARGET echo CAPVERSION=$SHOREWALL_CAPVERSION }