firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix error for 'Samba Service out only' IPv6. Remove 'echo-lines' at Samba Service (IPv4).

Browse Source
This commit is contained in:
Christoph 2018-10-21 18:29:01 +02:00
parent 9417303654
commit e9f1c30ad2
2 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ip6t-firewall-gateway
View File

@ -2140,7 +2140,7 @@ if $allow_samba_requests_out && ! $permit_local_net_to_inet ; then
$ip6t -A OUTPUT -o $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
if $kernel_forward_between_interfaces : then
if $kernel_forward_between_interfaces ; then
for _port in ${samba_udp_ports[@]} ; do
$ip6t -A FORWARD -o $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT

2
ipt-firewall-gateway
View File

@ -2837,11 +2837,9 @@ if $allow_samba_requests_out && ! $permit_local_net_to_inet ; then
if $kernel_activate_forwarding ; then
for _port in ${samba_udp_ports[@]} ; do
echo -e "\n$ipt -A FORWARD -o $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT"
$ipt -A FORWARD -o $_dev -p udp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
for _port in ${samba_tcp_ports[@]} ; do
echo "$ipt -A FORWARD -o $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT"
$ipt -A FORWARD -o $_dev -p tcp --dport $_port -m conntrack --ctstate NEW -j ACCEPT
done
fi