holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Fix detection of HASHLIMIT_MATCH on old kernels.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-01-27 12:53:31 -08:00
parent be117f6638
commit 9d25318d80
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
Shorewall/Perl/Shorewall/Config.pm
View File

@ -2199,11 +2199,11 @@ sub Comments() {
}
sub Hashlimit_Match() {
qt1( "$iptables -A $sillyname -m hashlimit --hashlimit-upto 3/min --hashlimit-burst 3 --hashlimit-name $sillyname --hashlimit-mode srcip -j ACCEPT" );
have_capability 'OLD_HL_MATCH' || qt1( "$iptables -A $sillyname -m hashlimit --hashlimit-upto 3/min --hashlimit-burst 3 --hashlimit-name $sillyname --hashlimit-mode srcip -j ACCEPT" );
}
sub Old_Hashlimit_Match() {
have_capability 'HASHLIMIT_MATCH' && qt1( "$iptables -A $sillyname -m hashlimit --hashlimit 3/min --hashlimit-burst 3 --hashlimit-name $sillyname --hashlimit-mode srcip -j ACCEPT" );
have_capability qt1( "$iptables -A $sillyname -m hashlimit --hashlimit 3/min --hashlimit-burst 3 --hashlimit-name $sillyname --hashlimit-mode srcip -j ACCEPT" );
}
sub Mark() {
@ -2417,8 +2417,8 @@ sub determine_capabilities( $ ) {
$capabilities{LENGTH_MATCH} = Length_Match;
$capabilities{ENHANCED_REJECT} = Enhanced_Reject;
$capabilities{COMMENTS} = Comments;
$capabilities{HASHLIMIT_MATCH} = Hashlimit_Match;
$capabilities{OLD_HL_MATCH} = Old_Hashlimit_Match;
$capabilities{HASHLIMIT_MATCH} = Hashlimit_Match;
$capabilities{MARK} = Mark;
$capabilities{XMARK} = Xmark;
$capabilities{EXMARK} = Exmark;