extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-16 03:10:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

Refine 'newnotsyn' option handling

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@601 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2003-06-18 19:49:54 +00:00
parent 88595aec4f
commit cc9fd2b4ef
1 changed files with 9 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
Shorewall/firewall
View File

@ -3307,11 +3307,15 @@ initialize_netfilter () {
if [ -z "$NEWNOTSYN" ]; then if [ -z "$NEWNOTSYN" ]; then
createchain newnotsyn no createchain newnotsyn no
for interface in `find_interfaces_by_option newnotsyn`; do interfaces=`find_interfaces_by_option newnotsyn`
#
# Packets arriving on this interface are submitted to the rules for interface in $interfaces; do
# for interface1 in $interfaces; do
run_iptables -A newnotsyn -i $interface -j RETURN run_iptables -A newnotsyn -i $interface -o $interface1 -p tcp --tcp-flags ACK ACK -j ACCEPT
run_iptables -A newnotsyn -i $interface -o $interface1 -p tcp --tcp-flags RST RST -j ACCEPT
done
run_iptables -A newnotsyn -i $interface -j RETURN
done done
run_user_exit newnotsyn run_user_exit newnotsyn
@ -3377,15 +3381,6 @@ build_common_chain() {
if [ -n "$NEWNOTSYN" ]; then if [ -n "$NEWNOTSYN" ]; then
run_iptables -A common -p tcp --tcp-flags ACK ACK -j ACCEPT run_iptables -A common -p tcp --tcp-flags ACK ACK -j ACCEPT
run_iptables -A common -p tcp --tcp-flags RST RST -j ACCEPT run_iptables -A common -p tcp --tcp-flags RST RST -j ACCEPT
else
interfaces=`find_interfaces_by_option newnotsyn`
for interface in $interfaces; do
for interface1 in $interfaces; do
run_iptables -A common -i $interface -o $interface1 -p tcp --tcp-flags ACK ACK -j ACCEPT
run_iptables -A common -i $interface -o $interface1 -p tcp --tcp-flags RST RST -j ACCEPT
done
done
fi fi
# #
# BROADCASTS # BROADCASTS