extern/sshuttle
1
1
Fork 0
mirror of https://github.com/sshuttle/sshuttle.git synced 2025-01-22 05:49:09 +01:00
Code Issues Packages Projects Releases Wiki Activity

ipfw: don't use 'log' parameter.

Browse Source 
I guess we were causing the kernel to syslog on every single packet on
MacOS.  Oops.
This commit is contained in:
Avery Pennarun 2012-01-02 18:19:08 -05:00 committed by Brian May
parent f1c79c7e92
commit 3eef3635ac
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/firewall.py
View File

@ -394,11 +394,11 @@ def do_ipfw(port, dnsport, family, subnets, udp):
in sorted(subnets, key=lambda s: s[1], reverse=True):
if sexclude:
ipfw('add', sport, 'skipto', xsport,
'log', 'tcp',
'tcp',
'from', 'any', 'to', '%s/%s' % (snet, swidth))
else:
ipfw('add', sport, 'fwd', '127.0.0.1,%d' % port,
'log', 'tcp',
'tcp',
'from', 'any', 'to', '%s/%s' % (snet, swidth),
'not', 'ipttl', '42', 'keep-state', 'setup')
@ -440,12 +440,12 @@ def do_ipfw(port, dnsport, family, subnets, udp):
for f, ip in filter(lambda i: i[0] == family, nslist):
# relabel and then catch outgoing DNS requests
ipfw('add', sport, 'divert', sport,
'log', 'udp',
'udp',
'from', 'any', 'to', '%s/32' % ip, '53',
'not', 'ipttl', '42')
# relabel DNS responses
ipfw('add', sport, 'divert', sport,
'log', 'udp',
'udp',
'from', 'any', str(dnsport), 'to', 'any',
'not', 'ipttl', '42')