holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Improve handling of PREROUTING for NAT

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@102 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-07-04 15:41:51 +00:00
parent 750d40ce03
commit 338673c29a
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Shorewall/firewall
View File

@ -1206,7 +1206,7 @@ setup_nat() {
-j DNAT --to-destination $internal -j DNAT --to-destination $internal
fi fi
else else
run_iptables -t nat -A PREROUTING -i $interface \ addnatrule `input_chain $interface` \
-d $external -j DNAT --to-destination $internal -d $external -j DNAT --to-destination $internal
run_iptables -t nat -A POSTROUTING -o $interface \ run_iptables -t nat -A POSTROUTING -o $interface \
-s $internal -j SNAT --to-source $external -s $internal -j SNAT --to-source $external
@ -2843,6 +2843,13 @@ activate_rules() {
multi_interfaces=`find_interfaces_by_option multi` multi_interfaces=`find_interfaces_by_option multi`
for interface in $all_interfaces; do
chain=`input_chain $interface`
havenatchain $chain && \
run_iptables -t nat -A PREROUTING -i $interface -j $chain
done
for zone in $zones; do for zone in $zones; do
eval source_hosts=\$${zone}_hosts eval source_hosts=\$${zone}_hosts