* PolicyCompiler_PrintRule.cpp (_printTarget): see #2235 "Modified

rule action for Continue". Rules with action "Continue" should
translate into iptables commands without "-j TARGET" parameter. If
such rule also has logging enabled, it should use target "-j LOG"
instead of generating additional chain.
This commit is contained in:
Vadim Kurland
2011-04-11 19:35:42 -07:00
parent b49e76a052
commit d64b12221a
133 changed files with 464 additions and 417 deletions
+6
View File
@@ -1,5 +1,11 @@
2011-04-11 vadim <vadim@netcitadel.com>
* PolicyCompiler_PrintRule.cpp (_printTarget): see #2235 "Modified
rule action for Continue". Rules with action "Continue" should
translate into iptables commands without "-j TARGET" parameter. If
such rule also has logging enabled, it should use target "-j LOG"
instead of generating additional chain.
* IPTImporter.cpp (pushPolicyRule): see #2206 Iptables commands with
no "-j TARGET" parameter should be imported using action "Continue".