forked from extern/shorewall_code
Fix restoration of iprange dynamic blacklist entries
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5423 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
0238e1f4d6
commit
64872be247
@ -4,6 +4,8 @@ Changes in 3.4.0 Final
|
||||
|
||||
2) Fix route_rules processing.
|
||||
|
||||
3) Fix restoration of ip range dynamic entries.
|
||||
|
||||
Changes in 3.4.0 RC 2
|
||||
|
||||
1) No longer include params file in compiled output.
|
||||
|
@ -5352,10 +5352,18 @@ __EOF__
|
||||
|
||||
if [ -f \${VARDIR}/save ]; then
|
||||
progress_message2 "Setting up dynamic rules..."
|
||||
while read target ignore1 ignore2 address rest; do
|
||||
rangematch='source IP range'
|
||||
while read target ignore1 ignore2 address ignore3 rest; do
|
||||
case \$target in
|
||||
DROP|reject|logdrop|logreject)
|
||||
run_iptables -A dynamic -s \$address -j \$target
|
||||
case \$rest in
|
||||
\$rangematch*)
|
||||
run_iptables -A dynamic -m iprange --src-range \${rest#source IP range}
|
||||
;;
|
||||
*)
|
||||
run_iptables -A dynamic -s \$address -j \$target
|
||||
;;
|
||||
esac
|
||||
;;
|
||||
esac
|
||||
done < \${VARDIR}/save
|
||||
|
Loading…
Reference in New Issue
Block a user