Add a few more configuration files - which list they should be in is just a guess at this stage

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4115 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
paulgear 2006-06-16 07:10:08 +00:00
parent 29550e2b78
commit 33214aab85
2 changed files with 42 additions and 5 deletions

View File

@ -17,3 +17,5 @@
rsync, ssh, and shorewall steps) is probably not worth the trouble to
code.
- Automatic generation of firewall hosts & interfaces files.

View File

@ -159,12 +159,47 @@ if (! -d $dir) {
#
# Config files for which the host-specific file is included *first*
my @hostfirstconfigs = qw( blacklist bogons ecn hosts interfaces maclist
masq nat proxyarp rfc1918 routestopped start stop stopped tcrules tos
tunnels );
my @hostfirstconfigs = qw(
accounting
actions
blacklist
bogons
continue
ecn
hosts
interfaces
maclist
masq
nat
netmap
proxyarp
rfc1918
routestopped
route_rules
start
started
stop
stopped
tcclasses
tcdevices
tcrules
tos
tunnels
);
# Config files for which the host-specific file is included *last*
my @hostlastconfigs = qw( common init modules params shorewall.conf );
my @hostlastconfigs = qw(
common
configpath
init
initdone
ipsec
modules
params
providers
shorewall.conf
);
for my $conf (@hostfirstconfigs) {
constructfile "$conf", "$dir/$conf", "$conf/$host", "$conf/COMMON";
@ -306,7 +341,7 @@ for (stripfile $conf) {
my ($src, $dst, $pol, $rest) = split /\s+/, $_, 4;
print "$src, $dst, $pol, $rest\n" if $DEBUG > 3;
# Both source and destination zones must be valid on this host for this
# policy to apply.
next unless defined $hostzones{$src} and defined $hostzones{$dst};