~mdw
/
firewall
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
eggle.m4, local.m4, local.mk: Add new VPS `eggle'.
[firewall]
/
bookends.m4
diff --git
a/bookends.m4
b/bookends.m4
index
1004b76
..
f567743
100644
(file)
--- a/
bookends.m4
+++ b/
bookends.m4
@@
-40,7
+40,7
@@
unref=nil
for ip in ip ip6; do
if [ "$FW_NOACT" ]; then break; fi
for ip in ip ip6; do
if [ "$FW_NOACT" ]; then break; fi
- for table in
$(cat /proc/net/${ip}_tables_names)
; do
+ for table in
filter mangle nat raw
; do
## Step 1: clear out the builtin chains.
${ip}tables -nL -t $table |
## Step 1: clear out the builtin chains.
${ip}tables -nL -t $table |
@@
-252,8
+252,7
@@
done
## Allow stuff through unknown tables.
for ip in ip ip6; do
## Allow stuff through unknown tables.
for ip in ip ip6; do
- for table in $(cat /proc/net/${ip}_tables_names); do
- case $table in mangle | filter) continue ;; esac
+ for table in nat raw security; do
${ip}tables -nL -t $table |
sed -n '/^Chain \([^ ]\+\) (policy .*$/ s//\1/p ' |
while read chain; do
${ip}tables -nL -t $table |
sed -n '/^Chain \([^ ]\+\) (policy .*$/ s//\1/p ' |
while read chain; do