holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Make exclusion work correctly with TPROXY.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-11-14 11:16:52 -08:00
parent 896d874aab
commit 06a4994488
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Shorewall/Perl/Shorewall/Tc.pm
View File

@ -266,6 +266,7 @@ sub process_tc_rule( ) {
my $rest;
my $matches = '';
my $mark1;
my $exceptionrule = '';
my %processtcc = ( sticky => sub() {
if ( $chain eq 'tcout' ) {
@ -391,6 +392,8 @@ sub process_tc_rule( ) {
}
$target .= ' --tproxy-mark';
$exceptionrule = '-p tcp ';
},
TTL => sub() {
fatal_error "TTL is not supported in IPv6 - use HL instead" if $family == F_IPV6;
@ -675,7 +678,7 @@ sub process_tc_rule( ) {
"$target " . join( '/', in_hex( $markval ) , $mask ) ,
'',
$target ,
'' );
$exceptionrule );
}
} elsif ( ( my $result = expand_rule( ensure_chain( 'mangle' , $chain ) ,
$restrictions{$chain} | $restriction,
@ -696,7 +699,7 @@ sub process_tc_rule( ) {
$mark ? "$target $mark" : $target,
'' ,
$target ,
'' ) )
$exceptionrule ) )
&& $device ) {
#
# expand_rule() returns destination device if any