forked from extern/shorewall_code
Allow MARK in action body -- take 2
This commit is contained in:
parent
bfdc8db31a
commit
393673a884
@ -586,7 +586,7 @@ sub process_actions2 () {
|
|||||||
#
|
#
|
||||||
# This function is called to process each rule generated from an action file.
|
# This function is called to process each rule generated from an action file.
|
||||||
#
|
#
|
||||||
sub process_action( $$$$$$$$$$ ) {
|
sub process_action( $$$$$$$$$$$ ) {
|
||||||
my ($chainref, $actionname, $target, $source, $dest, $proto, $ports, $sports, $rate, $user, $mark ) = @_;
|
my ($chainref, $actionname, $target, $source, $dest, $proto, $ports, $sports, $rate, $user, $mark ) = @_;
|
||||||
|
|
||||||
my ( $action , $level ) = split_action $target;
|
my ( $action , $level ) = split_action $target;
|
||||||
@ -638,7 +638,7 @@ sub process_macro3( $$$$$$$$$$$$ ) {
|
|||||||
my ( $mtarget, $msource, $mdest, $mproto, $mports, $msports, $morigdest, $mrate, $muser, $mmark );
|
my ( $mtarget, $msource, $mdest, $mproto, $mports, $msports, $morigdest, $mrate, $muser, $mmark );
|
||||||
|
|
||||||
if ( $format == 1 ) {
|
if ( $format == 1 ) {
|
||||||
( $mtarget, $msource, $mdest, $mproto, $mports, $msports, $mrate, $muser ) = split_line1 1, 'macro file', $macro_commands;
|
( $mtarget, $msource, $mdest, $mproto, $mports, $msports, $mrate, $muser ) = split_line1 1, 8, 'macro file', $macro_commands;
|
||||||
$morigdest = '-';
|
$morigdest = '-';
|
||||||
$mmark = '-';
|
$mmark = '-';
|
||||||
} else {
|
} else {
|
||||||
@ -698,7 +698,7 @@ sub process_macro3( $$$$$$$$$$$$ ) {
|
|||||||
$muser = merge_macro_column $muser, $user;
|
$muser = merge_macro_column $muser, $user;
|
||||||
$mmark = merge_macro_column $mmark, $mark;
|
$mmark = merge_macro_column $mmark, $mark;
|
||||||
|
|
||||||
process_action $chainref, $action, $mtarget, $msource, $mdest, $mproto, $mports, $msports, $mrate, $muser;
|
process_action $chainref, $action, $mtarget, $msource, $mdest, $mproto, $mports, $msports, $mrate, $muser, $mark;
|
||||||
}
|
}
|
||||||
|
|
||||||
pop_open;
|
pop_open;
|
||||||
@ -749,7 +749,7 @@ sub process_action3( $$$$$ ) {
|
|||||||
if ( $action2type == MACRO ) {
|
if ( $action2type == MACRO ) {
|
||||||
process_macro3( $action2, $param, $chainref, $action, $source, $dest, $proto, $ports, $sports, $rate, $user, $mark );
|
process_macro3( $action2, $param, $chainref, $action, $source, $dest, $proto, $ports, $sports, $rate, $user, $mark );
|
||||||
} else {
|
} else {
|
||||||
process_action $chainref, $action, $target2, $source, $dest, $proto, $ports, $sports, $rate, $user;
|
process_action $chainref, $action, $target2, $source, $dest, $proto, $ports, $sports, $rate, $user, $mark;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -30,6 +30,8 @@ Changes in Shorewall 4.4.2
|
|||||||
|
|
||||||
14) Allow per-ip LIMIT to work on ancient iptables releases.
|
14) Allow per-ip LIMIT to work on ancient iptables releases.
|
||||||
|
|
||||||
|
15) Add 'MARK' column to action body.
|
||||||
|
|
||||||
Changes in Shorewall 4.4.1
|
Changes in Shorewall 4.4.1
|
||||||
|
|
||||||
1) Deleted extra 'use ...IPAddrs.pm' from Nat.pm.
|
1) Deleted extra 'use ...IPAddrs.pm' from Nat.pm.
|
||||||
|
@ -220,6 +220,10 @@ Shorewall 4.4.2
|
|||||||
a capabilities file should regenerate that file after installing
|
a capabilities file should regenerate that file after installing
|
||||||
4.4.2.
|
4.4.2.
|
||||||
|
|
||||||
|
9) One unintended difference between Shorewall-shell and
|
||||||
|
Shorewall-perl was that Shorewall-perl did not support the MARK
|
||||||
|
column in action bodies. This has been corrected.
|
||||||
|
|
||||||
----------------------------------------------------------------------------
|
----------------------------------------------------------------------------
|
||||||
K N O W N P R O B L E M S R E M A I N I N G
|
K N O W N P R O B L E M S R E M A I N I N G
|
||||||
----------------------------------------------------------------------------
|
----------------------------------------------------------------------------
|
||||||
|
Loading…
Reference in New Issue
Block a user