extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-25 20:22:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

More save fixes

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1297 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-04-30 03:06:38 +00:00
parent fecc7529c5
commit d97b771632
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
Shorewall2/firewall
View File

@ -1156,10 +1156,12 @@ setup_forwarding() {
case "$IP_FORWARDING" in case "$IP_FORWARDING" in
[Oo][Nn]) [Oo][Nn])
echo 1 > /proc/sys/net/ipv4/ip_forward echo 1 > /proc/sys/net/ipv4/ip_forward
save_command "echo 1 > /proc/sys/net/ipv4/ip_forward"
echo "IP Forwarding Enabled" echo "IP Forwarding Enabled"
;; ;;
[Oo][Ff][Ff]) [Oo][Ff][Ff])
echo 0 > /proc/sys/net/ipv4/ip_forward echo 0 > /proc/sys/net/ipv4/ip_forward
save_command "echo 0 > /proc/sys/net/ipv4/ip_forward"
echo "IP Forwarding Disabled!" echo "IP Forwarding Disabled!"
;; ;;
esac esac
@ -4935,6 +4937,7 @@ add_common_rules() {
# #
for f in /proc/sys/net/ipv4/conf/*/arp_filter; do for f in /proc/sys/net/ipv4/conf/*/arp_filter; do
echo 0 > $f echo 0 > $f
save_command "echo 0 > $f"
done done
interfaces=$(find_interfaces_by_option arp_filter) interfaces=$(find_interfaces_by_option arp_filter)
@ -4946,6 +4949,7 @@ add_common_rules() {
file=/proc/sys/net/ipv4/conf/$interface/arp_filter file=/proc/sys/net/ipv4/conf/$interface/arp_filter
if [ -f $file ]; then if [ -f $file ]; then
echo 1 > $file echo 1 > $file
save_command "echo 1 > $file"
else else
error_message \ error_message \
"Warning: Cannot set ARP filtering on $interface" "Warning: Cannot set ARP filtering on $interface"
@ -4962,12 +4966,14 @@ add_common_rules() {
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 0 > $f echo 0 > $f
save_command "echo 0 > $f"
done done
for interface in $interfaces; do for interface in $interfaces; do
file=/proc/sys/net/ipv4/conf/$interface/rp_filter file=/proc/sys/net/ipv4/conf/$interface/rp_filter
if [ -f $file ]; then if [ -f $file ]; then
echo 1 > $file echo 1 > $file
save_command "echo 1 > $file"
else else
error_message \ error_message \
"Warning: Cannot set route filtering on $interface" "Warning: Cannot set route filtering on $interface"
@ -4975,7 +4981,13 @@ add_common_rules() {
done done
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
[ -n "$ROUTE_FILTER" ] && echo 1 > /proc/sys/net/ipv4/conf/default/rp_filter save_command "echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter"
if [ -n "$ROUTE_FILTER" ]; then
echo 1 > /proc/sys/net/ipv4/conf/default/rp_filter
save_command "echo 1 > /proc/sys/net/ipv4/conf/default/rp_filter"
fi
run_ip route flush cache run_ip route flush cache
save_command ip route flush cache save_command ip route flush cache
fi fi