holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Flush all mangle chains in refresh

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2788 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2005-10-04 17:04:19 +00:00
parent 400088ff09
commit 116f96b47e
3 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Shorewall/changelog.txt
View File

@ -16,6 +16,8 @@ Changes in 2.5.7
8) Give better diagnostics when IPP2P match isn't available. 8) Give better diagnostics when IPP2P match isn't available.
9) Do not touch mangle chain during "refresh".
Changes in 2.5.6 Changes in 2.5.6
1) Finish install/fallback cleanup. 1) Finish install/fallback cleanup.

11
Shorewall/firewall
View File

@ -1261,6 +1261,14 @@ setup_providers()
add_a_provider() { add_a_provider() {
local t n iface option local t n iface option
case $MARKING_CHAIN in
tcfor)
;;
*)
error_message "WARNING: MARK_IN_FORWARD_CHAIN=No is incompatible with multiple providers"
;;
esac
for t in $PROVIDERS; do for t in $PROVIDERS; do
if [ "$t" = "$table" ]; then if [ "$t" = "$table" ]; then
fatal_error "Duplicate Provider: $table, provider: \"$provider\"" fatal_error "Duplicate Provider: $table, provider: \"$provider\""
@ -3817,8 +3825,9 @@ refresh_tc() {
# Flush the TC mangle chains # Flush the TC mangle chains
# #
run_iptables -t mangle -F $chain run_iptables -t mangle -F $chain
[ -n "$MARK_IN_FORWARD_CHAIN" ] && run_iptables -t mangle -F tcpre
run_iptables -t mangle -F tcout run_iptables -t mangle -F tcout
run_iptables -t mangle -F tcpost
# #
# Process the TC Rules File # Process the TC Rules File
# #

4
Shorewall/releasenotes.txt
View File

@ -15,6 +15,8 @@ Problems Corrected in 2.5.7:
error on "shorewall start". This is a bug in the ipp2p code but I error on "shorewall start". This is a bug in the ipp2p code but I
have included a workaround in Shorewall. have included a workaround in Shorewall.
4) Fix "shorwall flush" vs mangle table.
New Features in 2.5.7: New Features in 2.5.7:
1) The output of "shorewall dump" now includes a capabilities report 1) The output of "shorewall dump" now includes a capabilities report
@ -33,6 +35,8 @@ New Features in 2.5.7:
must have restarted Shorewall using this release before this feature must have restarted Shorewall using this release before this feature
will work correctly. will work correctly.
5) The multi-ISP code
Migration Considerations: Migration Considerations:
1) The "monitor" command has been eliminated. 1) The "monitor" command has been eliminated.