forked from extern/shorewall_code
Remove some dead code and reduce confusion amoung those who read the code (including me)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2450 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
ac1983a5da
commit
1b1af2fc65
@ -560,9 +560,9 @@ dnat_chain() # $1 = zone
|
|||||||
}
|
}
|
||||||
|
|
||||||
#
|
#
|
||||||
# SNAT Chain to a zone or from an interface
|
# SNAT Chain to an interface
|
||||||
#
|
#
|
||||||
snat_chain() # $1 = zone or interface
|
snat_chain() # $1 = interface
|
||||||
{
|
{
|
||||||
echo $(chain_base $1)_snat
|
echo $(chain_base $1)_snat
|
||||||
}
|
}
|
||||||
@ -7654,10 +7654,9 @@ activate_rules()
|
|||||||
[ -n "$chain1" ] && run_iptables2 -A OUTPUT -o $interface $(match_dest_hosts $networks) $(match_ipsec_out $zone $host) -j $chain1
|
[ -n "$chain1" ] && run_iptables2 -A OUTPUT -o $interface $(match_dest_hosts $networks) $(match_ipsec_out $zone $host) -j $chain1
|
||||||
|
|
||||||
#
|
#
|
||||||
# Add jumps from the builtin chains for DNAT and SNAT rules
|
# Add jumps from the builtin chain for DNAT rules
|
||||||
#
|
#
|
||||||
addrulejump PREROUTING $(dnat_chain $zone) -i $interface $(match_source_hosts $networks) $(match_ipsec_in $zone $host)
|
addrulejump PREROUTING $(dnat_chain $zone) -i $interface $(match_source_hosts $networks) $(match_ipsec_in $zone $host)
|
||||||
addrulejump POSTROUTING $(snat_chain $zone) -o $interface $(match_dest_hosts $networks) $(match_ipsec_out $zone $host)
|
|
||||||
|
|
||||||
[ -n "$chain2" ] && run_iptables2 -A $(input_chain $interface) $(match_source_hosts $networks) $(match_ipsec_in $zone $host) -j $chain2
|
[ -n "$chain2" ] && run_iptables2 -A $(input_chain $interface) $(match_source_hosts $networks) $(match_ipsec_in $zone $host) -j $chain2
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user