holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Correct several problems with dynamic rules.

Browse Source 
Split NAT and Mangle tables into separate displays.
Add dynamic chain to the 'monitor' display.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@60 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-06-04 21:08:44 +00:00
parent 0e4274e027
commit b50d647981
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
Shorewall/shorewall
View File

@ -209,6 +209,13 @@ display_chains()
timed_read
clear
echo -e "$banner `date`\\n"
firstchain=Yes
echo -e "Dynamic Chain\\n"
showchain dynamic
timed_read
qt rm -f /tmp/chains-$$
else
iptables -L -n -v
@ -327,6 +334,10 @@ monitor_firewall() # $1 = timeout -- if negative, prompt each time that
echo -e "$banner `date`\\n"
echo -e "NAT Status\\n"
iptables -t nat -L -n -v
timed_read
clear
echo -e "$banner `date`\\n"
echo -e "\\nTOS/MARK Status\\n"
iptables -t mangle -L -n -v
timed_read
@ -658,13 +669,13 @@ case "$1" in
mutex_on
while [ $# -gt 1 ]; do
shift
if qt iptables -D dynamic -s $1 -j reject then
if qt iptables -D dynamic -s $1 -j reject; then
#
# Address was rejected -- silently remove any drop as well
#
qt iptables -D dynamic -s $1 -j DROP
echo "$1 Allowed"
elif qt iptables -D dynamic -s $1 -j DROP then
elif qt iptables -D dynamic -s $1 -j DROP; then
echo "$1 Allowed"
else
echo "$1 Not Dropped or Rejected"