-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 12/21/2016 07:30 AM, Steven Jan Springl wrote:
> Tom
>
> Mangle file entry:
>
> CHECKSUM 14.14.14.14 vif1:12.12.12.12 - - - - - - - - -
> - - RELATED:NEW - mangle3
>
> Generates iptables rule:
>
> -A tcpost -s 14.14.14.14 -d 12.12.12.12 -m conntrack --ctstate
> RELATED,NEW -o vif1 -j CHECKSUM --checksum-fill -m comment
> --comment "-XSUM1"
>
> There is no reference to the SWITCH mangle3. Is this expected?
>
No, it is not :-(
Patch attached.
Thanks Steven,
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org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=O1KD
-----END PGP SIGNATURE-----
diff --git a/Shorewall/Perl/Shorewall/Rules.pm b/Shorewall/Perl/Shorewall/Rules.pm
index 4e59212..e2b5a7a 100644
--- a/Shorewall/Perl/Shorewall/Rules.pm
+++ b/Shorewall/Perl/Shorewall/Rules.pm
@@ -4965,6 +4965,7 @@ sub process_mangle_rule1( $$$$$$$$$$$$$$$$$$$ ) {
do_dscp( $dscp ) .
state_match( $state ) .
do_time( $time ) .
+ do_condition( $condition, $chainref->{name} ) .
( $ttl ? "-t $ttl " : '' ) .
$raw_matches ,
$source ,
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/intel
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel
