extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-19 17:28:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

Disallow DEFAULTS in the rules file

Browse Source
This commit is contained in:
Tom Eastep 2011-06-21 21:00:08 -07:00
parent d51ca478bd
commit ece598288f
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Shorewall/Perl/Shorewall/Rules.pm
View File

@ -2373,11 +2373,20 @@ sub process_rule ( ) {
# #
process_section( 'NEW' ) unless $section; process_section( 'NEW' ) unless $section;
if ( $target eq 'DEFAULTS' ) {
if ( @actionstack ) {
default_action_params( split_list $source, 'defaults' );
next;
}
fatal_error "DEFAULTS is only allowed in an ACTION file";
}
if ( $source =~ /^none(:.*)?$/i || $dest =~ /^none(:.*)?$/i ) { if ( $source =~ /^none(:.*)?$/i || $dest =~ /^none(:.*)?$/i ) {
progress_message "Rule \"$currentline\" ignored."; progress_message "Rule \"$currentline\" ignored.";
return 1; return 1;
} }
my $intrazone = 0; my $intrazone = 0;
my $wild = 0; my $wild = 0;
my $thisline = $currentline; #We must save $currentline because it is overwritten by macro expansion my $thisline = $currentline; #We must save $currentline because it is overwritten by macro expansion