extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-08 22:58:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Delete jumps to empty chains

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9556 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2009-02-27 16:19:36 +00:00
parent fa4fc86e18
commit e6fa6a5153
3 changed files with 83 additions and 59 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
Shorewall/Shorewall/Chains.pm
View File

@ -73,6 +73,7 @@ our %EXPORT_TAGS = (
add_commands
move_rules
insert_rule1
purge_jump
add_tunnel_rule
process_comment
no_comment
@ -602,6 +603,21 @@ sub add_jump( $$$;$ ) {
add_rule ($fromref, join( '', $predicate, "-$param $to" ) );
}
#
# Purge a jump previously added via add_jump. If the target chain is empty, reset its
# referenced flag
#
sub purge_jump ( $$ ) {
my ( $fromref, $toref ) = @_;
my $to = $toref->{name};
for ( @{$fromref->{rules}} ) {
$_ = undef, last if / -j ${to}\b/;
}
$toref->{referenced} = 0 unless @{$toref->{rules}};
}
#
# Insert a rule into a chain. Arguments are:
#
@ -2773,7 +2789,7 @@ sub create_netfilter_load( $ ) {
# Then emit the rules
#
for my $chainref ( @chains ) {
emitr $chainref->{name}, $_ for ( @{$chainref->{rules}} );
emitr $chainref->{name}, $_ for ( grep defined $_, @{$chainref->{rules}} );
}
#
# Commit the changes to the table
@ -2885,7 +2901,7 @@ sub create_chainlist_reload($) {
#
# Emit the chain rules
#
emitr $chain, $_ for ( @rules );
emitr $chain, $_ for ( grep defined $_, @rules );
}
#
# Commit the changes to the table

12
Shorewall/Shorewall/Providers.pm
View File

@ -763,7 +763,8 @@ sub lookup_provider( $ ) {
# The Tc module has collected the 'sticky' rules in the 'tcpre' and 'tcout' chains. In this function, we apply them
# to the 'tracked' providers
#
sub handle_stickiness() {
sub handle_stickiness( $ ) {
my $havesticky = shift;
my $mask = $config{HIGH_ROUTE_MARKS} ? '0xFF00' : '0xFF';
my $setstickyref = $mangle_table->{setsticky};
my $setstickoref = $mangle_table->{setsticko};
@ -772,8 +773,10 @@ sub handle_stickiness() {
my %marked_interfaces;
my $sticky = 1;
if ( $havesticky ) {
fatal_error "There are SAME tcrules but no 'track' providers" unless @routemarked_providers;
for my $providerref ( @routemarked_providers ) {
my $interface = $providerref->{interface};
my $base = uc chain_base $interface;
@ -843,6 +846,11 @@ sub handle_stickiness() {
}
}
}
}
}
if ( @routemarked_providers ) {
purge_jump $mangle_table->{PREROUTING}, $setstickyref unless @{$setstickyref->{rules}};
purge_jump $mangle_table->{OUTPUT}, $setstickoref unless @{$setstickoref->{rules}};
}
}
1;

2
Shorewall/Shorewall/Tc.pm
View File

@ -988,7 +988,7 @@ sub setup_tc() {
add_rule ensure_chain( 'mangle' , 'tcpost' ), $_;
}
handle_stickiness if $sticky;
handle_stickiness( $sticky );
}
1;