holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

More infrastructure

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-01-27 15:37:23 -08:00
parent 2a2e23cb17
commit b3b074fb61
1 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
Shorewall/Perl/Shorewall/Rules.pm
View File

@ -53,7 +53,9 @@ our @EXPORT = qw(
verify_audit
);
our @EXPORT_OK = qw( initialize process_rule1 );
our %EXPORT_TAGS = ( action => [ qw( process_rule1 is_inline ) ] );
our @EXPORT_OK = qw( initialize process_rule1 is_inline );
our $VERSION = 'MODULEVERSION';
#
# Globals are documented in the initialize() function
@ -143,6 +145,10 @@ our %auditpolicies = ( ACCEPT => 1,
DROP => 1,
REJECT => 1
);
our @columns;
our @columnstack;
#
# Rather than initializing globals in an INIT block or during declaration,
# we initialize them in a function. This is done for two reasons:
@ -211,6 +217,9 @@ sub initialize( $ ) {
#
%usedactions = ();
@columns = ();
@columnstack = ();
if ( $family == F_IPV4 ) {
@builtins = qw/dropBcast allowBcast dropNotSyn rejNotSyn dropInvalid allowInvalid allowinUPnP forwardUPnP Limit/;
} else {
@ -1219,6 +1228,17 @@ sub use_action( $ ) {
}
}
#
# Determine if an action is in-line
#
sub is_inline($) {
$actions{$_[0]}->{inline};
}
sub inline_columns() {
@columns;
}
#
# This function determines the logging and params for a subordinate action or a rule within a superior action
#
@ -2409,6 +2429,10 @@ sub process_rule1 ( $$$$$$$$$$$$$$$$$$$ ) {
$current_param = $param unless $param eq '' || $param eq 'PARAM';
push @columnstack, [ ( @columns ) ];
@columns = ( $source, $dest, $proto, $ports, $sports, $origdest, $ratelimit, $user, $mark, $connlimit, $time, $headers, $condition, $helper, $wildcard );
my $generated = process_inline( $basictarget,
$chainref,
$rule,
@ -2431,6 +2455,8 @@ sub process_rule1 ( $$$$$$$$$$$$$$$$$$$ ) {
$helper,
$wildcard );
@columns = @{pop @columnstack};
$macro_nest_level--;
return $generated;