forked from extern/shorewall_code
Fix restoration of iprange dynamic blacklist entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5423 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
0238e1f4d6
commit
64872be247
@ -4,6 +4,8 @@ Changes in 3.4.0 Final
|
|||||||
|
|
||||||
2) Fix route_rules processing.
|
2) Fix route_rules processing.
|
||||||
|
|
||||||
|
3) Fix restoration of ip range dynamic entries.
|
||||||
|
|
||||||
Changes in 3.4.0 RC 2
|
Changes in 3.4.0 RC 2
|
||||||
|
|
||||||
1) No longer include params file in compiled output.
|
1) No longer include params file in compiled output.
|
||||||
|
@ -5352,10 +5352,18 @@ __EOF__
|
|||||||
|
|
||||||
if [ -f \${VARDIR}/save ]; then
|
if [ -f \${VARDIR}/save ]; then
|
||||||
progress_message2 "Setting up dynamic rules..."
|
progress_message2 "Setting up dynamic rules..."
|
||||||
while read target ignore1 ignore2 address rest; do
|
rangematch='source IP range'
|
||||||
|
while read target ignore1 ignore2 address ignore3 rest; do
|
||||||
case \$target in
|
case \$target in
|
||||||
DROP|reject|logdrop|logreject)
|
DROP|reject|logdrop|logreject)
|
||||||
run_iptables -A dynamic -s \$address -j \$target
|
case \$rest in
|
||||||
|
\$rangematch*)
|
||||||
|
run_iptables -A dynamic -m iprange --src-range \${rest#source IP range}
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
run_iptables -A dynamic -s \$address -j \$target
|
||||||
|
;;
|
||||||
|
esac
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
done < \${VARDIR}/save
|
done < \${VARDIR}/save
|
||||||
|
Loading…
x
Reference in New Issue
Block a user