extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-02-17 18:21:03 +01:00
Code Issues Packages Projects Releases Wiki Activity

Improve IPSEC hosts fix -- take II

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1671 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-10-09 00:41:02 +00:00
parent fa0c2ec9ab
commit ddd7bc732d
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Shorewall2/firewall
View File

@ -697,9 +697,8 @@ verify_interface()
} }
# #
# Generate a match for decrypted packets # Determine of communication to/from a host is encrypted using IPSEC
# #
ipsec_host() # $1 = zone, $2 = host ipsec_host() # $1 = zone, $2 = host
{ {
eval local is_ipsec=\$${1}_is_ipsec eval local is_ipsec=\$${1}_is_ipsec
@ -708,6 +707,9 @@ ipsec_host() # $1 = zone, $2 = host
test -n "$is_ipsec" || list_search $2 $hosts test -n "$is_ipsec" || list_search $2 $hosts
} }
#
# Generate a match for decrypted packets
#
match_ipsec_in() # $1 = zone, $2 = host match_ipsec_in() # $1 = zone, $2 = host
{ {
if ipsec_host $1 $2 ; then if ipsec_host $1 $2 ; then