holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Add intermediate input chain for complex zones

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@524 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2003-03-24 21:02:29 +00:00
parent 886ad1e547
commit b5d3078fa6
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Shorewall/firewall
View File

@ -544,7 +544,7 @@ determine_hosts() {
fi
[ "${host#*:}" = "0.0.0.0/0" ] || \
eval ${zone}_is_constrained=Yes
eval ${zone}_is_complex=Yes
done
eval ${zone}_interfaces="\$interfaces"
@ -3664,9 +3664,9 @@ activate_rules()
chain1=`rules_chain $FW $zone`
chain2=`rules_chain $zone $FW`
eval constrained=\$${zone}_is_constrained
eval complex=\$${zone}_is_complex
if [ -n "$constrained" ]; then
if [ -n "$complex" ]; then
frwd_chain=${zone}_frwd
createchain $frwd_chain No
fi
@ -3688,7 +3688,7 @@ activate_rules()
run_iptables -A `input_chain $interface` -s $subnet -j $chain2
[ -n "$constrained" ] && \
[ -n "$complex" ] && \
run_iptables -A `forward_chain $interface` -s $subnet -j $frwd_chain
done
@ -3707,7 +3707,7 @@ activate_rules()
for host in $source_hosts; do
interface=${host%:*}
if [ -n "$constrained" ]; then
if [ -n "$complex" ]; then
chain1=$frwd_chain
subnet=
else