forked from extern/shorewall_code
Fix firewall-generated broadcast traffic with maclist
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3430 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
23b4d140f1
commit
67277b1333
@ -2452,8 +2452,7 @@ ${INDENT} fatal_error "Interface $interface must be up before Shorewall can s
|
||||
|
||||
${INDENT}ip -f inet addr show $interface 2> /dev/null | grep 'inet.*brd' | sed 's/inet //; s/brd //; s/scope.*//;' | while read address broadcast; do
|
||||
${INDENT} address=\${address%/*}
|
||||
${INDENT} if [ -n "\$broadcast" ]; then
|
||||
${INDENT} run_iptables -t $MACLIST_TABLE -A $chain -s \$address -d \$broadcast -j RETURN
|
||||
${INDENT} run_iptables -t $MACLIST_TABLE -A $chain -s \$address -j RETURN
|
||||
${INDENT} fi
|
||||
${INDENT}done
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user