On Sat, 2011-08-20 at 06:24 -0700, Tom Eastep wrote: > You can work around this by configuring your net interfaces as: > > #ZONE INTERFACE BROADCAST OPTIONS > net ppp0 detect tcpflags,nosmurfs,optional > net ppp1 detect tcpflags,nosmurfs,optional > net ppp+ detect tcpflags,nosmurfs > > And by adding this to your policy file (before any net->all policy): > > #SOURCE DEST POLICY LOG LEVEL > LIMIT:BURST > net net NONE
And here is a patch that will allow the configuration to work without
the above hackish change.
patch /usr/share/shorewall/Shorewall/Zones.pm < OPTIONAL.patch
Thanks,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Zones.pm b/Shorewall/Perl/Shorewall/Zones.pm
index 2660e2a..dda5240 100644
--- a/Shorewall/Perl/Shorewall/Zones.pm
+++ b/Shorewall/Perl/Shorewall/Zones.pm
@@ -1375,8 +1375,7 @@ sub find_interfaces_by_option1( $ ) {
my @ints = ();
my $wild = 0;
- for my $interface ( sort { $interfaces{$a}->{number} <=> $interfaces{$b}->{number} }
- ( grep $interfaces{$_}{root}, keys %interfaces ) ) {
+ for my $interface ( sort { $interfaces{$a}->{number} <=> $interfaces{$b}->{number} } keys %interfaces ) {
my $interfaceref = $interfaces{$interface};
next unless defined $interfaceref->{physical};
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
