holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Disallow exclusion with CONTINUE in /etc/shorewall/tcrules

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5222 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-01-14 16:56:11 +00:00
parent ef446fe35c
commit a1a08d2daf
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Shorewall/lib.tcrules
View File

@ -201,6 +201,10 @@ process_tc_rule()
[ "x$sport" = "x-" ] || r="${r}--sport $sport " [ "x$sport" = "x-" ] || r="${r}--sport $sport "
if [ -n "${excludesources}${excludedests}" ]; then if [ -n "${excludesources}${excludedests}" ]; then
[ $target = RETURN ] && \
fatal_error "Exclusion is currently not supported with CONTINUE"
build_exclusion_chain chain1 mangle "$excludesources" "$excludedests" build_exclusion_chain chain1 mangle "$excludesources" "$excludedests"
run_iptables2 -t mangle -A $chain $r -j $chain1 run_iptables2 -t mangle -A $chain $r -j $chain1