firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix different errors concerning extern resources from local networks/inferfaces.

Browse Source
This commit is contained in:
Christoph
2019-02-23 21:11:32 +01:00
parent 17906277b7
commit 29c0ad1906
4 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ip6t-firewall-gateway
View File

@ -1039,7 +1039,7 @@ if [[ ${#allow_local_if_to_local_ip_arr[@]} -gt 0 ]] \
$ip6t -A FORWARD -p tcp -o ${_val_arr[0]} -s ${_val_arr[1]} --tcp-flag ACK ACK -j ACCEPT
fi
done
echo_ok
echo_done
else
echo_skipped
fi
@ -1055,7 +1055,7 @@ echononl "\tAllow extern service from given local interface"
if [[ ${#allow_local_if_to_ext_service_arr[@]} -gt 0 ]] \
&& $kernel_forward_between_interfaces ; then
for _val in "${#allow_local_if_to_ext_service_arr[@]}" ; do
for _val in "${allow_local_if_to_ext_service_arr[@]}" ; do
IFS=',' read -a _val_arr <<< "${_val}"
$ip6t -A FORWARD -p ${_val_arr[3]} -i ${_val_arr[0]} -d ${_val_arr[1]} --dport ${_val_arr[2]} -m conntrack --ctstate NEW -j ACCEPT
@ -1071,7 +1071,7 @@ if [[ ${#allow_local_if_to_ext_service_arr[@]} -gt 0 ]] \
fi
done
echo_ok
echo_done
else
echo_skipped
fi
@ -1100,7 +1100,7 @@ if [[ ${#allow_local_if_to_ext_net_arr[@]} -gt 0 ]] \
$ip6t -A FORWARD -p tcp -o ${_val_arr[0]} -s ${_val_arr[1]} --tcp-flag ACK ACK -j ACCEPT
fi
done
echo_ok
echo_done
else
echo_skipped
fi
@ -1161,7 +1161,7 @@ if [[ ${#allow_local_net_to_ext_net_arr[@]} -gt 0 ]] \
$ip6t -A FORWARD -p tcp -d ${_val_arr[0]} -s ${_val_arr[1]} --tcp-flag ACK ACK -j ACCEPT
fi
done
echo_ok
echo_done
else
echo_skipped
fi