Defer check for bridge until run-time

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6429 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-05-21 15:17:49 +00:00
parent f2bca1d1f3
commit 0babb39d89

View File

@ -3555,9 +3555,11 @@ __EOF__
for interface in $interfaces; do for interface in $interfaces; do
if [ -n "$BRIDGING" ]; then if [ -n "$BRIDGING" ]; then
is_bridge=$( brctl show 2> /dev/null | grep "^$interface[[:space:]]" ) indent >&3 << __EOF__
[ -n "$is_bridge" ] && \ is_bridge="\$( brctl show 2> /dev/null | grep '^$interface[[:space:]]' )"
do_iptables -A $(forward_chain $interface) -p udp -o $interface --dport 67:68 -j ACCEPT [ -n "\$is_bridge" ] && \
run_iptables -A $(forward_chain $interface) -p udp -o $interface --dport 67:68 -j ACCEPT
__EOF__
fi fi
run_iptables -A $(input_chain $interface) -p udp --dport 67:68 -j ACCEPT run_iptables -A $(input_chain $interface) -p udp --dport 67:68 -j ACCEPT
run_iptables -A $(out_chain $interface) -p udp --dport 67:68 -j ACCEPT run_iptables -A $(out_chain $interface) -p udp --dport 67:68 -j ACCEPT