mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-22 02:31:37 +02:00
Correct Broadcast Actions
- Delete --dst-type BROADCAST from IPv6 - Suppress superfluous multicast rule Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
3b5c1ad601
commit
ea21d61f39
@ -64,10 +64,10 @@ if ( have_capability( 'ADDRTYPE' ) ) {
|
|||||||
add_jump $chainref, $target, 0, "-d \$address ";
|
add_jump $chainref, $target, 0, "-d \$address ";
|
||||||
decr_cmd_level $chainref;
|
decr_cmd_level $chainref;
|
||||||
add_commands $chainref, 'done';
|
add_commands $chainref, 'done';
|
||||||
}
|
|
||||||
|
|
||||||
log_rule_limit $level, $chainref, 'Broadcast' , $action, '', $tag, 'add', ' -d 224.0.0.0/4 ' if $level ne '';
|
log_rule_limit $level, $chainref, 'Broadcast' , $action, '', $tag, 'add', ' -d 224.0.0.0/4 ' if $level ne '';
|
||||||
add_jump $chainref, $target, 0, '-d 224.0.0.0/4 ';
|
add_jump $chainref, $target, 0, '-d 224.0.0.0/4 ';
|
||||||
|
}
|
||||||
|
|
||||||
1;
|
1;
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
#
|
#
|
||||||
# Shorewall 4 - Broadcast Action
|
# Shorewall 4 - Multicast/Anycast Action
|
||||||
#
|
#
|
||||||
# /usr/share/shorewall/action.Broadcast
|
# /usr/share/shorewall/action.Broadcast
|
||||||
#
|
#
|
||||||
@ -46,7 +46,6 @@ fatal_error "Invalid parameter to action Broadcast" if supplied $audit && $aud
|
|||||||
|
|
||||||
if ( have_capability( 'ADDRTYPE' ) ) {
|
if ( have_capability( 'ADDRTYPE' ) ) {
|
||||||
if ( $level ne '' ) {
|
if ( $level ne '' ) {
|
||||||
log_rule_limit $level, $chainref, 'dropBcast' , $action, '', $tag, 'add', ' -m addrtype --dst-type BROADCAST ';
|
|
||||||
log_rule_limit $level, $chainref, 'dropBcast' , $action, '', $tag, 'add', ' -m addrtype --dst-type MULTICAST ';
|
log_rule_limit $level, $chainref, 'dropBcast' , $action, '', $tag, 'add', ' -m addrtype --dst-type MULTICAST ';
|
||||||
log_rule_limit $level, $chainref, 'dropBcast' , $action, '', $tag, 'add', ' -m addrtype --dst-type ANYCAST ';
|
log_rule_limit $level, $chainref, 'dropBcast' , $action, '', $tag, 'add', ' -m addrtype --dst-type ANYCAST ';
|
||||||
}
|
}
|
||||||
@ -61,10 +60,10 @@ if ( have_capability( 'ADDRTYPE' ) ) {
|
|||||||
add_jump $chainref, $target, 0, "-d \$address ";
|
add_jump $chainref, $target, 0, "-d \$address ";
|
||||||
decr_cmd_level $chainref;
|
decr_cmd_level $chainref;
|
||||||
add_commands $chainref, 'done';
|
add_commands $chainref, 'done';
|
||||||
}
|
|
||||||
|
|
||||||
log_rule_limit( $level, $chainref, 'Broadcast' , $action, '', $tag, 'add', join( ' ', '-d', IPv6_MULTICAST . ' ' ) ) if $level ne '';
|
log_rule_limit( $level, $chainref, 'Broadcast' , $action, '', $tag, 'add', join( ' ', '-d', IPv6_MULTICAST . ' ' ) ) if $level ne '';
|
||||||
add_jump $chainref, $target, 0, join( ' ', '-d', IPv6_MULTICAST . ' ' );
|
add_jump $chainref, $target, 0, join( ' ', '-d', IPv6_MULTICAST . ' ' );
|
||||||
|
}
|
||||||
|
|
||||||
1;
|
1;
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user