holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Correct several problems with dynamic rules.

Browse Source 
Split NAT and Mangle tables into separate displays.
Add dynamic chain to the 'monitor' display.


git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@60 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2002-06-04 21:08:44 +00:00
parent 0e4274e027
commit b50d647981
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
Shorewall/shorewall
View File

@ -209,6 +209,13 @@ display_chains()
timed_read timed_read
clear
echo -e "$banner `date`\\n"
firstchain=Yes
echo -e "Dynamic Chain\\n"
showchain dynamic
timed_read
qt rm -f /tmp/chains-$$ qt rm -f /tmp/chains-$$
else else
iptables -L -n -v iptables -L -n -v
@ -327,6 +334,10 @@ monitor_firewall() # $1 = timeout -- if negative, prompt each time that
echo -e "$banner `date`\\n" echo -e "$banner `date`\\n"
echo -e "NAT Status\\n" echo -e "NAT Status\\n"
iptables -t nat -L -n -v iptables -t nat -L -n -v
timed_read
clear
echo -e "$banner `date`\\n"
echo -e "\\nTOS/MARK Status\\n" echo -e "\\nTOS/MARK Status\\n"
iptables -t mangle -L -n -v iptables -t mangle -L -n -v
timed_read timed_read
@ -658,13 +669,13 @@ case "$1" in
mutex_on mutex_on
while [ $# -gt 1 ]; do while [ $# -gt 1 ]; do
shift shift
if qt iptables -D dynamic -s $1 -j reject then if qt iptables -D dynamic -s $1 -j reject; then
# #
# Address was rejected -- silently remove any drop as well # Address was rejected -- silently remove any drop as well
# #
qt iptables -D dynamic -s $1 -j DROP qt iptables -D dynamic -s $1 -j DROP
echo "$1 Allowed" echo "$1 Allowed"
elif qt iptables -D dynamic -s $1 -j DROP then elif qt iptables -D dynamic -s $1 -j DROP; then
echo "$1 Allowed" echo "$1 Allowed"
else else
echo "$1 Not Dropped or Rejected" echo "$1 Not Dropped or Rejected"