Tom Eastep wrote: > Klemens Rutz wrote: >> Hi, >> >> playing around with the nosmurfs option I found out that the firewall script >> contains >> no rules to enter <interface>_fwd chains when generated shorewall-perl: >> # grep eth0_fwd firewall >> :eth0_fwd - [0:0] >> -A eth0_fwd -m state --state NEW,INVALID -j smurfs >> >> As a result the nosmurf option does not affect forwarded packages. This is >> also true for >> other interface options like e.g. tcpflags, maclist, etc. > > Please see if the attached hack to > /usr/share/shorewall-perl/Shorewall/Chains.pm corrects this for you.
I've come up now with the correct patch -- please reverse the prior patch (if you've applied it) and apply this one. This will be released shortly as Shorewall-perl-4.2.6.1. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
Index: Shorewall/Rules.pm
===================================================================
--- Shorewall/Rules.pm (revision 9467)
+++ Shorewall/Rules.pm (working copy)
@@ -1930,6 +1930,7 @@
} else {
$chain3ref = $filter_table->{FORWARD};
$match_source_dev = match_source_dev $interface;
+ move_rules $filter_table->{forward_chain $interface}, $chainref;
}
for my $hostref ( @$arrayref ) {
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
