From 4edc473e3e708db975b4ef264d35cb4878d7cbfe Mon Sep 17 00:00:00 2001
From: Bill Nottingham <notting@redhat.com>
Date: Mon, 12 Aug 2002 20:35:02 +0000
Subject: fix iptables invocation (#71201)

---
 sysconfig/network-scripts/ifup      | 6 +++---
 sysconfig/network-scripts/ifup-post | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

(limited to 'sysconfig/network-scripts')

diff --git a/sysconfig/network-scripts/ifup b/sysconfig/network-scripts/ifup
index 05731c35..d80fd87c 100755
--- a/sysconfig/network-scripts/ifup
+++ b/sysconfig/network-scripts/ifup
@@ -178,7 +178,7 @@ if [ -n "${DYNCONFIG}" ]; then
     # what DNS server they're using until they are done.
     FWHACK=
     if [ -n "$FWACTIVE" -a "$FIREWALL_MODS" != "no" ]; then
-        iptables -A RH-Lokkit-0-50-INPUT -s 0/0 --sport 53 -d 0/0 --dport 1025:65535 -p udp -m udp -j ACCEPT
+        iptables -A RH-Lokkit-0-50-INPUT -m udp -s 0/0 --sport 53 -d 0/0 --dport 1025:65535 -p udp -j ACCEPT
 	FWHACK=1
     fi
     
@@ -190,11 +190,11 @@ if [ -n "${DYNCONFIG}" ]; then
 	echo $" done."
     else
 	echo $" failed."
-	[ -n "$FWHACK" ] && iptables -D RH-Lokkit-0-50-INPUT -s 0/0 --sport 53 -d 0/0 --dport 1025:65535 -p udp -m udp -j ACCEPT
+	[ -n "$FWHACK" ] && iptables -D RH-Lokkit-0-50-INPUT -m udp -s 0/0 --sport 53 -d 0/0 --dport 1025:65535 -p udp -j ACCEPT
 	exit 1
     fi
 
-    [ -n "$FWHACK" ] && iptables -D RH-Lokkit-0-50-INPUT -s 0/0 --sport 53 -d 0/0 --dport 1025:65535 -p udp -m udp -j ACCEPT
+    [ -n "$FWHACK" ] && iptables -D RH-Lokkit-0-50-INPUT -m udp -s 0/0 --sport 53 -d 0/0 --dport 1025:65535 -p udp -j ACCEPT
 
     # DHCP likes to create duplicate routes.  Fix that up.
     NUMDEFROUTES=`ip -o route | \
diff --git a/sysconfig/network-scripts/ifup-post b/sysconfig/network-scripts/ifup-post
index e36b3a93..da1ab88c 100755
--- a/sysconfig/network-scripts/ifup-post
+++ b/sysconfig/network-scripts/ifup-post
@@ -88,7 +88,7 @@ if [ "$FIREWALL_MODS" != "no" -a -f /etc/sysconfig/ipchains ] && \
 	if [ -n "$ns" ]; then
 		for nameserver in $ns ; do
 			if ! iptables -L RH-Lokkit-0-50-INPUT -n | grep -q $nameserver ; then
-				iptables -A RH-Lokkit-0-50-INPUT -s $nameserver/32 --sport 53 -d 0/0 --dport 1025:65535 -p udp -m udp -j ACCEPT
+				iptables -A RH-Lokkit-0-50-INPUT -m udp -s $nameserver/32 --sport 53 -d 0/0 --dport 1025:65535 -p udp -j ACCEPT
 				[ -x /usr/bin/logger ] && logger $"punching nameserver $nameserver through the firewall"
 			fi
 		done
-- 
cgit v1.2.1