From f71bf18e0fdc886e54511e2923f1f8a5692bf27a Mon Sep 17 00:00:00 2001 From: teastep Date: Thu, 9 Dec 2004 03:18:32 +0000 Subject: [PATCH] Corrections to ipsec and dynamic zones git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1814 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall2/firewall | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Shorewall2/firewall b/Shorewall2/firewall index 4b6255206..375b9f0ee 100755 --- a/Shorewall2/firewall +++ b/Shorewall2/firewall @@ -6802,7 +6802,7 @@ add_to_zone() # $1...${n-1} = [:] $n = zone if [ "$iface" != "$interface" -o "$hosts" != "$host" ]; then if is_ipsec_host $z1 $h; then - do_iptables -I ${z1}_frwd $(match_source_hosts $hosts) -o $interface $(match_dest_hosts $host) $(match_ipsec_out $z2 $newhost) -j $chain + do_iptables -I ${z1}_frwd -o $interface $(match_dest_hosts $host) $(match_ipsec_out $z2 $newhost) -j $chain else do_iptables -A $(dynamic_fwd $iface) $(match_source_hosts $hosts) -o $interface $(match_dest_hosts $host) $(match_ipsec_out $z2 $newhost) -j $chain fi @@ -6977,7 +6977,7 @@ delete_from_zone() # $1 = [:] $2 = zone if [ "$iface" != "$interface" -o "$hosts" != "$host" ]; then if is_ipsec_host $z1 $h; then - do_iptables -D ${z1}_frwd $(match_source_hosts $hosts) -o $interface $(match_dest_hosts $host) $(match_ipsec_out $z2 $newhost) -j $chain + do_iptables -D ${z1}_frwd -o $interface $(match_dest_hosts $host) $(match_ipsec_out $z2 $delhost) -j $chain else qt_iptables -D $(dynamic_fwd $iface) $(match_source_hosts $hosts) -o $interface $(match_dest_hosts $host) $(match_ipsec_out $z2 $delhost) -j $chain fi