forked from extern/shorewall_code
Back out EXMARK detection since it is unused in 4.4.
Long overdue change to LIBVERSION Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
b0feeb805d
commit
4e50ea14ea
@ -226,7 +226,6 @@ our %capdesc = ( NAT_ENABLED => 'NAT',
|
|||||||
KLUDGEFREE => 'Repeat match',
|
KLUDGEFREE => 'Repeat match',
|
||||||
MARK => 'MARK Target',
|
MARK => 'MARK Target',
|
||||||
XMARK => 'Extended Mark Target',
|
XMARK => 'Extended Mark Target',
|
||||||
EXMARK => 'Extended Mark Target 2',
|
|
||||||
MANGLE_FORWARD => 'Mangle FORWARD Chain',
|
MANGLE_FORWARD => 'Mangle FORWARD Chain',
|
||||||
COMMENTS => 'Comments',
|
COMMENTS => 'Comments',
|
||||||
ADDRTYPE => 'Address Type Match',
|
ADDRTYPE => 'Address Type Match',
|
||||||
@ -330,7 +329,7 @@ sub initialize( $ ) {
|
|||||||
EXPORT => 0,
|
EXPORT => 0,
|
||||||
UNTRACKED => 0,
|
UNTRACKED => 0,
|
||||||
VERSION => "4.4.6",
|
VERSION => "4.4.6",
|
||||||
CAPVERSION => 40407 ,
|
CAPVERSION => 40406 ,
|
||||||
);
|
);
|
||||||
|
|
||||||
#
|
#
|
||||||
@ -605,7 +604,6 @@ sub initialize( $ ) {
|
|||||||
KLUDGEFREE => undef,
|
KLUDGEFREE => undef,
|
||||||
MARK => undef,
|
MARK => undef,
|
||||||
XMARK => undef,
|
XMARK => undef,
|
||||||
EXMARK => undef,
|
|
||||||
MANGLE_FORWARD => undef,
|
MANGLE_FORWARD => undef,
|
||||||
COMMENTS => undef,
|
COMMENTS => undef,
|
||||||
ADDRTYPE => undef,
|
ADDRTYPE => undef,
|
||||||
@ -2070,7 +2068,6 @@ sub determine_capabilities( $ ) {
|
|||||||
if ( qt1( "$iptables -t mangle -A $sillyname -j MARK --set-mark 1" ) ) {
|
if ( qt1( "$iptables -t mangle -A $sillyname -j MARK --set-mark 1" ) ) {
|
||||||
$capabilities{MARK} = 1;
|
$capabilities{MARK} = 1;
|
||||||
$capabilities{XMARK} = qt1( "$iptables -t mangle -A $sillyname -j MARK --and-mark 0xFF" );
|
$capabilities{XMARK} = qt1( "$iptables -t mangle -A $sillyname -j MARK --and-mark 0xFF" );
|
||||||
$capabilities{EXMARK} = qt1( "$iptables -t mangle -A $sillyname -j MARK --set-mark 1/0xFF" );
|
|
||||||
}
|
}
|
||||||
|
|
||||||
if ( qt1( "$iptables -t mangle -A $sillyname -j CONNMARK --save-mark" ) ) {
|
if ( qt1( "$iptables -t mangle -A $sillyname -j CONNMARK --save-mark" ) ) {
|
||||||
|
@ -29,8 +29,8 @@
|
|||||||
# and /usr/share/shorewall-lite/shorecap.
|
# and /usr/share/shorewall-lite/shorecap.
|
||||||
#
|
#
|
||||||
|
|
||||||
SHOREWALL_LIBVERSION=40000
|
SHOREWALL_LIBVERSION=40406
|
||||||
SHOREWALL_CAPVERSION=40407
|
SHOREWALL_CAPVERSION=40406
|
||||||
|
|
||||||
[ -n "${VARDIR:=/var/lib/shorewall}" ]
|
[ -n "${VARDIR:=/var/lib/shorewall}" ]
|
||||||
[ -n "${SHAREDIR:=/usr/share/shorewall}" ]
|
[ -n "${SHAREDIR:=/usr/share/shorewall}" ]
|
||||||
@ -813,7 +813,6 @@ determine_capabilities() {
|
|||||||
KLUDGEFREE=
|
KLUDGEFREE=
|
||||||
MARK=
|
MARK=
|
||||||
XMARK=
|
XMARK=
|
||||||
EXMARK=
|
|
||||||
MANGLE_FORWARD=
|
MANGLE_FORWARD=
|
||||||
COMMENTS=
|
COMMENTS=
|
||||||
ADDRTYPE=
|
ADDRTYPE=
|
||||||
@ -915,7 +914,6 @@ determine_capabilities() {
|
|||||||
if qt $IPTABLES -t mangle -A $chain -j MARK --set-mark 1; then
|
if qt $IPTABLES -t mangle -A $chain -j MARK --set-mark 1; then
|
||||||
MARK=Yes
|
MARK=Yes
|
||||||
qt $IPTABLES -t mangle -A $chain -j MARK --and-mark 0xFF && XMARK=Yes
|
qt $IPTABLES -t mangle -A $chain -j MARK --and-mark 0xFF && XMARK=Yes
|
||||||
qt $IPTABLES -t mangle -A $chain -j MARK --set-mark 1/0xFF && EXMARK=Yes
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if qt $IPTABLES -t mangle -A $chain -j CONNMARK --save-mark; then
|
if qt $IPTABLES -t mangle -A $chain -j CONNMARK --save-mark; then
|
||||||
@ -1013,7 +1011,6 @@ report_capabilities() {
|
|||||||
report_capability "Repeat match" $KLUDGEFREE
|
report_capability "Repeat match" $KLUDGEFREE
|
||||||
report_capability "MARK Target" $MARK
|
report_capability "MARK Target" $MARK
|
||||||
[ -n "$MARK" ] && report_capability "Extended MARK Target" $XMARK
|
[ -n "$MARK" ] && report_capability "Extended MARK Target" $XMARK
|
||||||
[ -n "$XMARK" ] && report_capability "Extended MARK Target 2" $EXMARK
|
|
||||||
report_capability "Mangle FORWARD Chain" $MANGLE_FORWARD
|
report_capability "Mangle FORWARD Chain" $MANGLE_FORWARD
|
||||||
report_capability "Comments" $COMMENTS
|
report_capability "Comments" $COMMENTS
|
||||||
report_capability "Address Type Match" $ADDRTYPE
|
report_capability "Address Type Match" $ADDRTYPE
|
||||||
@ -1073,7 +1070,6 @@ report_capabilities1() {
|
|||||||
report_capability1 KLUDGEFREE
|
report_capability1 KLUDGEFREE
|
||||||
report_capability1 MARK
|
report_capability1 MARK
|
||||||
report_capability1 XMARK
|
report_capability1 XMARK
|
||||||
report_capability1 EXMARK
|
|
||||||
report_capability1 MANGLE_FORWARD
|
report_capability1 MANGLE_FORWARD
|
||||||
report_capability1 COMMENTS
|
report_capability1 COMMENTS
|
||||||
report_capability1 ADDRTYPE
|
report_capability1 ADDRTYPE
|
||||||
|
@ -32,8 +32,8 @@
|
|||||||
# by the compiler.
|
# by the compiler.
|
||||||
#
|
#
|
||||||
|
|
||||||
SHOREWALL_LIBVERSION=40300
|
SHOREWALL_LIBVERSION=40406
|
||||||
SHOREWALL_CAPVERSION=40407
|
SHOREWALL_CAPVERSION=40406
|
||||||
|
|
||||||
[ -n "${VARDIR:=/var/lib/shorewall6}" ]
|
[ -n "${VARDIR:=/var/lib/shorewall6}" ]
|
||||||
[ -n "${SHAREDIR:=/usr/share/shorewall6}" ]
|
[ -n "${SHAREDIR:=/usr/share/shorewall6}" ]
|
||||||
@ -722,7 +722,6 @@ determine_capabilities() {
|
|||||||
KLUDGEFREE=
|
KLUDGEFREE=
|
||||||
MARK=
|
MARK=
|
||||||
XMARK=
|
XMARK=
|
||||||
EXMARK=
|
|
||||||
MANGLE_FORWARD=
|
MANGLE_FORWARD=
|
||||||
COMMENTS=
|
COMMENTS=
|
||||||
ADDRTYPE=
|
ADDRTYPE=
|
||||||
@ -823,7 +822,6 @@ determine_capabilities() {
|
|||||||
if qt $IP6TABLES -t mangle -A $chain -j MARK --set-mark 1; then
|
if qt $IP6TABLES -t mangle -A $chain -j MARK --set-mark 1; then
|
||||||
MARK=Yes
|
MARK=Yes
|
||||||
qt $IP6TABLES -t mangle -A $chain -j MARK --and-mark 0xFF && XMARK=Yes
|
qt $IP6TABLES -t mangle -A $chain -j MARK --and-mark 0xFF && XMARK=Yes
|
||||||
qt $IP6TABLES -t mangle -A $chain -j MARK --set-mark 1/0xFF && EXMARK=Yes
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if qt $IP6TABLES -t mangle -A $chain -j CONNMARK --save-mark; then
|
if qt $IP6TABLES -t mangle -A $chain -j CONNMARK --save-mark; then
|
||||||
@ -919,7 +917,6 @@ report_capabilities() {
|
|||||||
report_capability "Repeat match" $KLUDGEFREE
|
report_capability "Repeat match" $KLUDGEFREE
|
||||||
report_capability "MARK Target" $MARK
|
report_capability "MARK Target" $MARK
|
||||||
[ -n "$MARK" ] && report_capability "Extended MARK Target" $XMARK
|
[ -n "$MARK" ] && report_capability "Extended MARK Target" $XMARK
|
||||||
[ -n "$XMARK" ] && report_capability "Extended MARK Target 2" $EXMARK
|
|
||||||
report_capability "Mangle FORWARD Chain" $MANGLE_FORWARD
|
report_capability "Mangle FORWARD Chain" $MANGLE_FORWARD
|
||||||
report_capability "Comments" $COMMENTS
|
report_capability "Comments" $COMMENTS
|
||||||
report_capability "Address Type Match" $ADDRTYPE
|
report_capability "Address Type Match" $ADDRTYPE
|
||||||
@ -976,7 +973,6 @@ report_capabilities1() {
|
|||||||
report_capability1 KLUDGEFREE
|
report_capability1 KLUDGEFREE
|
||||||
report_capability1 MARK
|
report_capability1 MARK
|
||||||
report_capability1 XMARK
|
report_capability1 XMARK
|
||||||
report_capability1 EXMARK
|
|
||||||
report_capability1 MANGLE_FORWARD
|
report_capability1 MANGLE_FORWARD
|
||||||
report_capability1 COMMENTS
|
report_capability1 COMMENTS
|
||||||
report_capability1 ADDRTYPE
|
report_capability1 ADDRTYPE
|
||||||
|
Loading…
Reference in New Issue
Block a user