firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix error forwarding private networks.

Browse Source
This commit is contained in:
Christoph 2019-05-19 18:30:18 +02:00
parent dc91143e39
commit 55bd9d4335
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ip6t-firewall-server
View File

@ -504,15 +504,17 @@ fi
if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then
echononl "\tAllow forwarding (private) IPs / IP-Ranges.." echononl "\tAllow forwarding (private) IPs / IP-Ranges.."
for _ip in ${forward_private_ip_arr[@]}; do for _ip in ${forward_private_ip_arr[@]}; do
$ip6t -A OUTPUT -d $_ip -j ACCEPT
$ip6t -A INPUT -s $_ip -j ACCEPT
if $kernel_forward_between_interfaces ; then if $kernel_forward_between_interfaces ; then
$ip6t -A FORWARD -d $_ip -j ACCEPT $ip6t -A FORWARD -d $_ip -j ACCEPT
$ip6t -A FORWARD -s $_ip -j ACCEPT $ip6t -A FORWARD -s $_ip -j ACCEPT
fi
done
echo_done echo_done
else else
echo_skipped echo_skipped
fi fi
done
fi

6
ipt-firewall-server
View File

@ -629,15 +629,17 @@ fi
if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then
echononl "\tAllow forwarding (private) IPs / IP-Ranges.." echononl "\tAllow forwarding (private) IPs / IP-Ranges.."
for _ip in ${forward_private_ip_arr[@]}; do for _ip in ${forward_private_ip_arr[@]}; do
$ipt -A OUTPUT -d $_ip -j ACCEPT
$ipt -A INPUT -s $_ip -j ACCEPT
if $kernel_activate_forwarding ; then if $kernel_activate_forwarding ; then
$ipt -A FORWARD -d $_ip -j ACCEPT $ipt -A FORWARD -d $_ip -j ACCEPT
$ipt -A FORWARD -s $_ip -j ACCEPT $ipt -A FORWARD -s $_ip -j ACCEPT
fi
done
echo_done echo_done
else else
echo_skipped echo_skipped
fi fi
done
fi