onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-09-15 09:29:36 +02:00
Code Issues Releases Wiki Activity

* IPTImporter.cpp (pushPolicyRule): see #2206 Iptables commands with

Browse Source 
no "-j TARGET" parameter should be imported using action "Continue".
This commit is contained in:
Vadim Kurland
2011-04-11 18:58:34 -07:00
parent b2e9445cec
commit b49e76a052
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/ChangeLog
+3
View File
@@ -1,5 +1,8 @@
2011-04-11 vadim <vadim@netcitadel.com>
* IPTImporter.cpp (pushPolicyRule): see #2206 Iptables commands with
no "-j TARGET" parameter should be imported using action "Continue".
* iptables.g (comment): see #2336 Importer for iptables recognizes
version stored in the top comment by iptables-save and sets
version in the firewall object it creates.
src/import/IPTImporter.cpp
+3 -2
View File
@@ -817,12 +817,13 @@ void IPTImporter::pushPolicyRule()
ropt->setBool("ipt_tee", !action_params["route_tee"].empty());
}
if (target=="RETURN")
if (target=="RETURN" || target.empty())
{
action = PolicyRule::Continue;
}
if (target=="TCPMSS" && action_params["clamp-mss-to-pmtu"]=="--clamp-mss-to-pmtu")
if (target=="TCPMSS" &&
action_params["clamp-mss-to-pmtu"] == "--clamp-mss-to-pmtu")
{
fwopt->setBool("clamp_mss_to_mtu", true);
skip_rule = true;