holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Fix FW->FW REDIRECT

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@365 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-12-13 18:39:05 +00:00
parent 775d9d92ba
commit 46f0ae548f
1 changed files with 28 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
STABLE/firewall
View File

@ -849,8 +849,14 @@ validate_rule() {
chain=${source}2${dest} chain=${source}2${dest}
if [ "x$chain" = x${FW}2${FW} ]; then if [ "x$chain" = x${FW}2${FW} ]; then
case $logtarget in
REDIRECT)
;;
*)
error_message "WARNING: fw -> fw rules are not supported; rule \"$rule\" ignored" error_message "WARNING: fw -> fw rules are not supported; rule \"$rule\" ignored"
return return
;;
esac
fi fi
# #
@ -1966,6 +1972,7 @@ add_a_rule()
add_nat_rule add_nat_rule
fi fi
if [ $chain != ${FW}2${FW} ]; then
serv="${serv:+-d $serv}" serv="${serv:+-d $serv}"
[ -n "$loglevel" ] && run_iptables -A $chain $proto $multiport \ [ -n "$loglevel" ] && run_iptables -A $chain $proto $multiport \
@ -1974,6 +1981,7 @@ add_a_rule()
--log-level $loglevel --log-level $loglevel
run_iptables -A $chain $proto $multiport $state $cli $sports \ run_iptables -A $chain $proto $multiport $state $cli $sports \
$serv $dports -j $target $serv $dports -j $target
fi
else else
# Destination is a simple zone # Destination is a simple zone
@ -2104,11 +2112,17 @@ process_rule() # $1 = target
chain=${source}2${dest} chain=${source}2${dest}
if [ "x$chain" = x${FW}2${FW} ]; then if [ "x$chain" = x${FW}2${FW} ]; then
case $logtarget in
REDIRECT)
;;
*)
error_message "WARNING: fw -> fw rules are not supported; rule \"$rule\" ignored" error_message "WARNING: fw -> fw rules are not supported; rule \"$rule\" ignored"
return return
fi ;;
esac
else
ensurechain $chain ensurechain $chain
fi
# Generate Netfilter rule(s) # Generate Netfilter rule(s)