Tom Eastep wrote:
> Srinivasa Hebbar wrote:
>
>> The rules generated ${VARDIR/.restart is as follows.
>> run_iptables -A loc2net -p tcp --match mac --mac-source
>> 00:01:01:01:01:01 --dport 80 -j ACCEPT
>> progress_message " Rule \"ACCEPT loc:~00-01-01-01-01-01 net tcp 80
>> \" added."
>> run_iptables -A loc2net -p tcp -i net0 -s ~00-02-02-02-02-02 --dport 80
>> -j ACCEPT
>> progress_message " Rule \"ACCEPT loc:net0:~00-02-02-02-02-02 net tcp
>> 80 \" added."
>>
>> Looks like this is a compiler issue.
>>
>> I am using shorewall 3.4.4
>
> Attached is a patch for 4.0 Shorewall-shell which applies with an offset to
> 3.4.4.A similar problem exists with the tcrules file. Patch attached. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Index: Shorewall-shell/lib.tcrules
===================================================================
--- Shorewall-shell/lib.tcrules (revision 7915)
+++ Shorewall-shell/lib.tcrules (working copy)
@@ -105,6 +105,11 @@
$FW:*)
r="$(source_ip_range ${source#*:}) "
;;
+ *:~*|*:!~*)
+ interface=${source%:*}
+ verify_interface $interface || fatal_error "Unknown interface $interface in rule \"$rule\""
+ r="$(match_source_dev $interface) $(mac_match ${source#*:}) "
+ ;;
*:*)
interface=${source%:*}
verify_interface $interface || fatal_error "Unknown interface $interface in rule \"$rule\""
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
