mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-22 23:53:30 +01:00
41ea3bdeda
- Separate DNAT and REDIRECT into DNAT- and REDIRECT- plus ACCEPT Signed-off-by: Tom Eastep <teastep@shorewall.net>
58 lines
1.9 KiB
Plaintext
58 lines
1.9 KiB
Plaintext
#
|
|
# Shorewall -- /etc/shorewall/action.ResetEvent
|
|
#
|
|
# Reset an Event
|
|
#
|
|
# Parameters:
|
|
#
|
|
# Event - Must start with a letter and be composed of letters, digits,
|
|
# '-', and '_'.
|
|
# Action - Action to perform after setting the event. Default is ACCEPT
|
|
# Src or Dest - 'src' (default) or 'dst'. Determines if the event is
|
|
# associated with the source address (src) or destination
|
|
# address (dst)
|
|
# Disposition - Disposition for any rule generated.
|
|
#
|
|
# For additional information, see http://www.shorewall.net/Events.html
|
|
#
|
|
###############################################################################
|
|
# DO NOT REMOVE THE FOLLOWING LINE
|
|
##############################################################################################################################################################
|
|
#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST RATE USER MARK CONNLIMIT TIME HEADERS SWITCH HELPER
|
|
|
|
DEFAULTS -,ACCEPT,src,-
|
|
|
|
?begin perl
|
|
|
|
use Shorewall::Config;
|
|
use Shorewall::Chains;
|
|
use Shorewall::Rules;
|
|
use strict;
|
|
|
|
my ( $event, $action, $destination, $disposition ) = get_action_params( 4 );
|
|
|
|
require_capability 'RECENT_MATCH', 'Use of events', 's';
|
|
require_capability 'MARK_ANYWHERE', 'Use of events', 's';
|
|
|
|
fatal_error "An event name is required" unless supplied $event;
|
|
fatal_error "Invalid event name ($event)" unless $event =~ /^[a-zA-z][-\w]*$/;
|
|
fatal_error "Invalid Src or Dest ($destination)" unless $destination =~ /^(?:src|dst)$/;
|
|
|
|
set_action_disposition( $disposition) if supplied $disposition;
|
|
set_action_name_to_caller;
|
|
|
|
if ( ( $targets{$action} || 0 ) & NATRULE ) {
|
|
perl_action_helper( "${action}-", "" );
|
|
$action = 'ACCEPT';
|
|
}
|
|
|
|
if ( $destination eq 'dst' ) {
|
|
perl_action_helper( $action, '', '', "-m recent --name $event --remove --rdest" );
|
|
} else {
|
|
perl_action_helper( $action, '', '', "-m recent --name $event --remove --rsource" );
|
|
}
|
|
|
|
1;
|
|
|
|
?end perl
|