holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Make multiport work with iptables 1.2.7

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@197 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-08-14 16:01:32 +00:00
parent d501ed19ef
commit 6ae0ea8981
1 changed files with 27 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
Shorewall/firewall
View File

@ -1565,7 +1565,13 @@ add_nat_rule() {
# Replace destination port by the new destination port
[ -n "$servport" ] && dports="--dport ${servport#*:}"
if [ -n "$servport" ]; then
if [ -z "$multiport" ]; then
dports="--dport ${servport#*:}"
else
dports="--dports ${servport#*:}"
fi
fi
# Handle SNAT
@ -1650,18 +1656,29 @@ add_a_rule()
case $proto in
tcp|udp|TCP|UDP|6|17)
if [ -n "$port" -a "x${port}" != "x-" ]; then
[ -n "$multioption" ] && \
[ "$port" != "${port%,*}" ] && \
multiport="$multioption"
dports="--dport $port"
if [ -n "$multioption" ]; then
if [ "$port" != "${port%,*}" ]; then
multiport="$multioption"
dports="--dports $port"
else
dports="--dport $port"
fi
else
dports="--dport $port"
fi
fi
if [ -n "$cport" -a "x${cport}" != "x-" ]; then
[ -n "$multioption" ] && \
[ -z "$multiport" ] && \
[ "$cport" != "${cport%,*}" ] && \
multiport="$multioption"
sports="--sport $cport"
if [ -n "$multioption" ]; then
if [ "$cport" != "${cport%,*}" ]; then
multiport="$multioption"
sports="--sports $cport"
else
sports="--sport $cport"
fi
else
sports="--sport $cport"
fi
fi
;;
icmp|ICMP|1)