forked from extern/shorewall_code
Add a few more configuration files - which list they should be in is just a guess at this stage
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4115 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
29550e2b78
commit
33214aab85
@ -17,3 +17,5 @@
|
||||
rsync, ssh, and shorewall steps) is probably not worth the trouble to
|
||||
code.
|
||||
|
||||
- Automatic generation of firewall hosts & interfaces files.
|
||||
|
||||
|
@ -159,12 +159,47 @@ if (! -d $dir) {
|
||||
#
|
||||
|
||||
# Config files for which the host-specific file is included *first*
|
||||
my @hostfirstconfigs = qw( blacklist bogons ecn hosts interfaces maclist
|
||||
masq nat proxyarp rfc1918 routestopped start stop stopped tcrules tos
|
||||
tunnels );
|
||||
my @hostfirstconfigs = qw(
|
||||
accounting
|
||||
actions
|
||||
blacklist
|
||||
bogons
|
||||
continue
|
||||
ecn
|
||||
hosts
|
||||
interfaces
|
||||
maclist
|
||||
masq
|
||||
nat
|
||||
netmap
|
||||
proxyarp
|
||||
rfc1918
|
||||
routestopped
|
||||
route_rules
|
||||
start
|
||||
started
|
||||
stop
|
||||
stopped
|
||||
tcclasses
|
||||
tcdevices
|
||||
tcrules
|
||||
tos
|
||||
tunnels
|
||||
);
|
||||
|
||||
# Config files for which the host-specific file is included *last*
|
||||
my @hostlastconfigs = qw( common init modules params shorewall.conf );
|
||||
my @hostlastconfigs = qw(
|
||||
common
|
||||
configpath
|
||||
init
|
||||
initdone
|
||||
ipsec
|
||||
modules
|
||||
params
|
||||
providers
|
||||
shorewall.conf
|
||||
);
|
||||
|
||||
|
||||
for my $conf (@hostfirstconfigs) {
|
||||
constructfile "$conf", "$dir/$conf", "$conf/$host", "$conf/COMMON";
|
||||
@ -306,7 +341,7 @@ for (stripfile $conf) {
|
||||
my ($src, $dst, $pol, $rest) = split /\s+/, $_, 4;
|
||||
|
||||
print "$src, $dst, $pol, $rest\n" if $DEBUG > 3;
|
||||
|
||||
|
||||
# Both source and destination zones must be valid on this host for this
|
||||
# policy to apply.
|
||||
next unless defined $hostzones{$src} and defined $hostzones{$dst};
|
||||
|
Loading…
Reference in New Issue
Block a user