onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-13 08:29:32 +02:00
Code Issues Releases Wiki Activity

see #2197 "iptables nat rules in

Browse Source 
chain OUTPUT not imported correctly"
This commit is contained in:
Vadim Kurland
2011-03-07 18:49:22 -08:00
parent 304fa20d24
commit 9632d9b141
2 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/ChangeLog
+5 -1
View File
@@ -1,8 +1,12 @@
2011-03-07 vadim <vadim@netcitadel.com>
* IPTImporter.cpp (pushNATRule): see #2197 "iptables nat rules in
chain OUTPUT not imported correctly"
* iptables.g (nat_addr_range): see #2194 "iptables import problem
with SNAT rule translating to an address range". NAT rules
translating into address range did not import correctly
translating into address range with "-j SNAT --to-source
192.168.1.1-192.168.1.10" did not import correctly
* IPTImporter.cpp (pushNATRule): fixes #2195 "incorrect iptables
import of nat rule with NETMAP target"
src/libgui/IPTImporter.cpp
+8
View File
@@ -1277,6 +1277,14 @@ void IPTImporter::pushNATRule()
{
rule_type = NATRule::DNAT;
// if chain is "OUTPUT", put fw object in OSrc
if (current_chain == "OUTPUT")
{
RuleElementOSrc *re = rule->getOSrc();
assert(re!=NULL);
re->addRef(getFirewallObject());
}
FWObject *tdst = NULL;
if (nat_addr1!=nat_addr2)
tdst = createAddressRange(nat_addr1, nat_addr2);