On Wed, 2011-11-09 at 17:51 -0800, Eric Horst wrote:
> I wasn't sure if you meant to send this to the whole users list or
> just you. I didn't feel comfortable sending our configs to the world.
> Attached is /etc/shorewall directory. Version is 4.4.25.2 currently.
> Also 4.4.19.4 in use.

Here's a patch. 

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________


diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm
index 77b35e4..f1e6b4c 100644
--- a/Shorewall/Perl/Shorewall/Misc.pm
+++ b/Shorewall/Perl/Shorewall/Misc.pm
@@ -1399,8 +1399,6 @@ sub handle_loopback_traffic() {
 	    }
 	}
     }
-
-    add_ijump $filter_table->{INPUT} , j => 'ACCEPT', i => 'lo';
 }
 
 #
@@ -1410,6 +1408,8 @@ sub add_interface_jumps {
     our %input_jump_added;
     our %output_jump_added;
     our %forward_jump_added;
+
+    add_ijump $filter_table->{INPUT} , j => 'ACCEPT', i => 'lo';
     #
     # Add Nat jumps
     #
@@ -1475,6 +1475,8 @@ sub add_interface_jumps {
 		add_ijump $filter_table->{OUTPUT} , j => $outputref , imatch_dest_dev( $interface ) unless get_interface_option( $interface, 'port' );
 	    }
 	}
+
+	$input_jump_added{$interface} = $output_jump_added{$interface} = $forward_jump_added{$interface} = 1;
     }
 
     handle_loopback_traffic;

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to