From 8ae9b2948e60be8d3efca0050b801aefedc335b3 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Tue, 16 Aug 2011 16:17:02 -0700 Subject: [PATCH] Make 'start debug' work with the rawpost table. Signed-off-by: Tom Eastep --- Shorewall/Perl/prog.header | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/Shorewall/Perl/prog.header b/Shorewall/Perl/prog.header index 8e021ac02..61d431ef1 100644 --- a/Shorewall/Perl/prog.header +++ b/Shorewall/Perl/prog.header @@ -803,13 +803,17 @@ debug_restore_input() { qt1 $IPTABLES -t mangle -P $chain ACCEPT done - qt1 $IPTABLES -t raw -F - qt1 $IPTABLES -t raw -X + qt1 $IPTABLES -t raw -F + qt1 $IPTABLES -t raw -X + qt1 $IPTABLES -t rawpost -F + qt1 $IPTABLES -t rawpost -X for chain in PREROUTING OUTPUT; do qt1 $IPTABLES -t raw -P $chain ACCEPT done + qt1 $iptables -T rawpost -P POSTROUTING ACCEPT + run_iptables -t nat -F run_iptables -t nat -X @@ -859,6 +863,9 @@ debug_restore_input() { '*'raw) table=raw ;; + '*'rawpost) + table=rawpost + ;; '*'mangle) table=mangle ;;