[fwbuilder-commits] changes by vkurland
Brought to you by:
mikehorn
From: Vadim K. <vku...@us...> - 2004-10-30 07:17:35
|
Update of /cvsroot/fwbuilder/fwbuilder2/test/ipt In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv30722/test/ipt Modified Files: objects-for-regression-tests.fwb Log Message: bugfixes in fwb_ipt for cases when it uses iptables-restore compiler placed extra quote '"' at the end of each NAT command in the script using iptables-restore; this happened only if all interfaces of the firewall had static addresses testing policy installation via iptables-restore with old versions of iptables (1.2.6a). Need to include "-m tcp", "-m udp" or "-m icmp", otherwise iptables-restore does not understand options "--dport", "--tcp-flags" and some others. Also had to use "--tcp-flags SYN,RST,ACK SYN" instea dof "--syn" for better backwards compatibility. |