From c07b9537629ab23d80bc0e645127f57e0d0e197e Mon Sep 17 00:00:00 2001 From: Olivier Blin Date: Fri, 1 Jul 2005 06:21:59 +0000 Subject: add 'routeback' option for bridge interfaces in shorewall interfaces file --- perl-install/network/shorewall.pm | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'perl-install/network') diff --git a/perl-install/network/shorewall.pm b/perl-install/network/shorewall.pm index 1771ea280..11ee3c70f 100644 --- a/perl-install/network/shorewall.pm +++ b/perl-install/network/shorewall.pm @@ -111,13 +111,18 @@ sub write { push @{$ports_by_proto{$3}}, $1; } + my $interface_settings = sub { + my ($zone, $interface) = @_; + [ $zone, $interface, 'detect', if_(detect_devices::is_bridge_interface($interface), 'routeback') ]; + }; + set_config_file("zones", [ 'net', 'Net', 'Internet zone' ], if_($conf->{loc_interface}[0], [ 'loc', 'Local', 'Local' ]), ); set_config_file('interfaces', - [ 'net', $conf->{net_interface}, 'detect' ], - (map { [ 'loc', $_, 'detect' ] } @{$conf->{loc_interface} || []}), + $interface_settings->('net', $conf->{net_interface}), + (map { $interface_settings->('loc', $_) } @{$conf->{loc_interface} || []}), ); set_config_file('policy', if_($conf->{loc_interface}[0], [ 'loc', 'net', 'ACCEPT' ], [ 'loc', 'fw', 'ACCEPT' ], [ 'fw', 'loc', 'ACCEPT' ]), -- cgit v1.2.1