forked from extern/shorewall_code
Fix 'dhcp' with 'nets'
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
924ec49d09
commit
6ed207aba0
@ -919,6 +919,13 @@ sub add_common_rules ( $ ) {
|
|||||||
p => "udp --dport $ports" ,
|
p => "udp --dport $ports" ,
|
||||||
imatch_dest_dev( $interface ) )
|
imatch_dest_dev( $interface ) )
|
||||||
if get_interface_option( $interface, 'bridge' );
|
if get_interface_option( $interface, 'bridge' );
|
||||||
|
|
||||||
|
unless ( $family == F_IPV6 || get_interface_option( $interface, 'allip' ) ) {
|
||||||
|
add_ijump( $filter_table->{input_chain( $interface ) } ,
|
||||||
|
j => 'ACCEPT' ,
|
||||||
|
p => "udp --dport $ports" ,
|
||||||
|
s => NILIPv4 . '/32' );
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -782,7 +782,11 @@ sub add_group_to_zone($$$$$)
|
|||||||
ipsec => $type & IPSEC ? 'ipsec' : 'none' ,
|
ipsec => $type & IPSEC ? 'ipsec' : 'none' ,
|
||||||
exclusions => \@exclusions };
|
exclusions => \@exclusions };
|
||||||
|
|
||||||
$interfaces{$interface}{options}{routeback} ||= ( $type != IPSEC && $options->{routeback} );
|
if ( $type != IPSEC ) {
|
||||||
|
my $optref = $interfaces{$interface}{options};
|
||||||
|
$optref->{routeback} ||= $options->{routeback};
|
||||||
|
$optref->{allip} ||= $allip;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
#
|
#
|
||||||
|
Loading…
Reference in New Issue
Block a user