[Ipcop-svn] SF.net SVN: ipcop:[4878] ipcop/trunk/src/scripts/puzzleFwRules.pl

[<owes@us...>]

Revision: 4878
          http://ipcop.svn.sourceforge.net/ipcop/?rev=4878&view=rev
Author:   owes
Date:     2010-08-26 07:11:45 +0000 (Thu, 26 Aug 2010)

Log Message:
-----------
Jump to Pinholes Chain, regardless of policy and for all interfaces except for RED.

Modified Paths:
--------------
    ipcop/trunk/src/scripts/puzzleFwRules.pl

Modified: ipcop/trunk/src/scripts/puzzleFwRules.pl
===================================================================
--- ipcop/trunk/src/scripts/puzzleFwRules.pl	2010-08-26 04:46:40 UTC (rev 4877)
+++ ipcop/trunk/src/scripts/puzzleFwRules.pl	2010-08-26 07:11:45 UTC (rev 4878)
@@ -987,16 +987,14 @@
                 &prepareRule("-A FW_IPCOP -i $FW::interfaces{$inIface}{'IFACE'} -j ADRFILTERINPUT");
                 &prepareRule("-A FW_IPCOP_FORWARD -i $FW::interfaces{$inIface}{'IFACE'} -j ADRFILTERFORWARD");
             }
-
-            # dmzholes for blue
-            &prepareRule("-A FW_IPCOP_FORWARD -i $FW::interfaces{$inIface}{'IFACE'} -j FW_PINHOLES");
         }
-        elsif ($FW::interfaces{$inIface}{'COLOR'} eq "ORANGE_COLOR") {
 
-            # dmzholes for orange
+        if ($FW::interfaces{$inIface}{'COLOR'} ne "RED_COLOR") {
+            # add 'Pinholes' for all policies and all 'our' interfaces except for RED.
+            # Policy 'open' also needs Pinholes to be able to define a block or log rule.
             &prepareRule("-A FW_IPCOP_FORWARD -i $FW::interfaces{$inIface}{'IFACE'} -j FW_PINHOLES");
         }
-        elsif ($FW::interfaces{$inIface}{'COLOR'} eq "RED_COLOR") {
+        else {
 
             # always allow ping on red
             my @serviceXYZ = &buildServiceParamsDefault('Ping', "");
@@ -1063,11 +1061,6 @@
             }    # forward END
 
         }    #  if ($ifacePolicies{$inIface}{'POLICY'} eq 'open') {
-        elsif ($FW::interfaces{$inIface}{'COLOR'} =~ /^GREEN_COLOR|IPSEC_COLOR|OVPN_COLOR$/) {
-            # add 'Pinholes' in case policy is 'half-open' or 'closed'.
-            # Blue and Orange are special and have pinholes included elsewhere
-            &prepareRule("-A FW_IPCOP_FORWARD -i $FW::interfaces{$inIface}{'IFACE'} -j FW_PINHOLES");
-        }
 
         # default Logging (if enabled) + DROP/REJECT rules per interface
         $defaultRule = "-A FW_LOG -i $FW::interfaces{$inIface}{'IFACE'} -j";


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Ipcop-svn] SF.net SVN: ipcop:[4877] IPCopDoc/trunk/de/admin/images/extalias.png

[<owes@us...>]

Revision: 4877
          http://ipcop.svn.sourceforge.net/ipcop/?rev=4877&view=rev
Author:   owes
Date:     2010-08-26 04:46:40 +0000 (Thu, 26 Aug 2010)

Log Message:
-----------
Revert to previous image

Modified Paths:
--------------
    IPCopDoc/trunk/de/admin/images/extalias.png

Modified: IPCopDoc/trunk/de/admin/images/extalias.png
===================================================================
(Binary files differ)


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.