holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

More routestopped fixes

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8997 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-12-11 22:55:21 +00:00
parent 7ebb79b53e
commit 00fb21b9b1
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Shorewall-perl/Shorewall/Rules.pm
View File

@ -454,6 +454,8 @@ sub process_routestopped() {
push @allhosts, @hosts; push @allhosts, @hosts;
} }
my $tool = $family == F_IPV4 ? '$IPTABLES' : '$IP6TABLES';
for my $host ( @allhosts ) { for my $host ( @allhosts ) {
my ( $interface, $h ) = split /\|/, $host; my ( $interface, $h ) = split /\|/, $host;
my $source = match_source_net $h; my $source = match_source_net $h;
@ -461,18 +463,18 @@ sub process_routestopped() {
my $sourcei = match_source_dev $interface; my $sourcei = match_source_dev $interface;
my $desti = match_dest_dev $interface; my $desti = match_dest_dev $interface;
emit "\$IPTABLES -A INPUT $sourcei $source -j ACCEPT"; emit "$tool -A INPUT $sourcei $source -j ACCEPT";
emit "\$IPTABLES -A OUTPUT $desti $dest -j ACCEPT" unless $config{ADMINISABSENTMINDED}; emit "$tool -A OUTPUT $desti $dest -j ACCEPT" unless $config{ADMINISABSENTMINDED};
my $matched = 0; my $matched = 0;
if ( $source{$host} ) { if ( $source{$host} ) {
emit "\$IPTABLES -A FORWARD $sourcei $source -j ACCEPT"; emit "$tool -A FORWARD $sourcei $source -j ACCEPT";
$matched = 1; $matched = 1;
} }
if ( $dest{$host} ) { if ( $dest{$host} ) {
emit "\$IPTABLES -A FORWARD $desti $dest -j ACCEPT"; emit "$tool -A FORWARD $desti $dest -j ACCEPT";
$matched = 1; $matched = 1;
} }
@ -482,7 +484,7 @@ sub process_routestopped() {
my ( $interface1, $h1 ) = split /:/, $host1; my ( $interface1, $h1 ) = split /:/, $host1;
my $dest1 = match_dest_net $h1; my $dest1 = match_dest_net $h1;
my $desti1 = match_dest_dev $interface1; my $desti1 = match_dest_dev $interface1;
emit "\$IPTABLES -A FORWARD $sourcei $desti1 $source $dest1 -j ACCEPT"; emit "$tool -A FORWARD $sourcei $desti1 $source $dest1 -j ACCEPT";
clearrule; clearrule;
} }
} }