holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Allow specification of the TPROXY mark in CONNMARK and MARK.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2018-06-14 07:58:06 -07:00
parent b11d63a7bd
commit 150f7ab798
No known key found for this signature in database
GPG Key ID: 96E6B3F2423A4D10
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall/Perl/Shorewall/Chains.pm
View File

@ -5289,8 +5289,8 @@ sub do_imac( $ ) {
#
sub verify_mark( $ ) {
my $mark = $_[0];
my $limit = $globals{EXCLUSION_MASK};
my $mask = $globals{TC_MASK};
my $limit = $config{TC_EXPERT} ? $globals{TPROXY_MARK} + 1 : $globals{EXCLUSION_MASK};
my $mask = $config{TC_EXPERT} ? $globals{TPROXY_MARK} : $globals{TC_MASK};
my $value = numeric_value( $mark );
fatal_error "Invalid Mark or Mask value ($mark)"