From f87f7bbda034b4a9f6e72a4106f228e5f7d29fc4 Mon Sep 17 00:00:00 2001 From: Christoph Date: Tue, 3 Sep 2019 03:52:54 +0200 Subject: [PATCH] Support multiple networks for access to local resolver - forgot iptables scripts. --- ip6t-firewall-server | 10 ++++++---- ipt-firewall-server | 10 ++++++---- 2 files changed, 12 insertions(+), 8 deletions(-) diff --git a/ip6t-firewall-server b/ip6t-firewall-server index 7fedbf5..01d1cb8 100755 --- a/ip6t-firewall-server +++ b/ip6t-firewall-server @@ -1044,11 +1044,13 @@ fi echononl "\t\tlocal Resolver" if [[ -n "$local_resolver_service" ]] && $local_resolver_service ; then - if [[ -z "$resolver_allowed_net" ]] ; then - echo_failed - else - $ip6t -A INPUT -p udp -s $resolver_allowed_net --dport $resolver_port -m conntrack --ctstate NEW -j ACCEPT + if [[ ${#resolver_allowed_network_arr[@]} -gt 0 ]] ; then + for _net in ${resolver_allowed_network_arr[@]} ; do + $ip6t -A INPUT -p udp -s $_net --dport $resolver_port -m conntrack --ctstate NEW -j ACCEPT + done echo_done + else + echo_failed fi else echo_skipped diff --git a/ipt-firewall-server b/ipt-firewall-server index 1a40842..25e411f 100755 --- a/ipt-firewall-server +++ b/ipt-firewall-server @@ -1288,11 +1288,13 @@ fi echononl "\t\tlocal Resolver" if [[ -n "$local_resolver_service" ]] && $local_resolver_service ; then - if [[ -z "$resolver_allowed_net" ]] ; then - echo_failed - else - $ipt -A INPUT -p udp -s $resolver_allowed_net --dport $resolver_port -m conntrack --ctstate NEW -j ACCEPT + if [[ ${#resolver_allowed_network_arr[@]} -gt 0 ]] ; then + for _net in ${resolver_allowed_network_arr[@]} ; do + $ipt -A INPUT -p udp -s $_net --dport $resolver_port -m conntrack --ctstate NEW -j ACCEPT + done echo_done + else + echo_failed fi else echo_skipped