summaryrefslogtreecommitdiff
path: root/lib/Vyatta
diff options
context:
space:
mode:
authorMohit Mehta <mohit.mehta@vyatta.com>2009-08-05 12:28:30 -0700
committerMohit Mehta <mohit.mehta@vyatta.com>2009-08-05 12:28:30 -0700
commit7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb (patch)
tree2a7e68d997f3012362366ca61b2b90baee9b1eee /lib/Vyatta
parentf51a7d45564720a6e7af25dea13581b5de63b29d (diff)
downloadvyatta-cfg-firewall-7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb.tar.gz
vyatta-cfg-firewall-7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb.zip
add tcp_udp as a valid key to hash. feature developer is responsible
for allowing user to use tcp_udp as a valid protocol. currently, this option is planned to be used for NAT and firewall only
Diffstat (limited to 'lib/Vyatta')
-rwxr-xr-xlib/Vyatta/IpTables/AddressFilter.pm7
1 files changed, 7 insertions, 0 deletions
diff --git a/lib/Vyatta/IpTables/AddressFilter.pm b/lib/Vyatta/IpTables/AddressFilter.pm
index 01c2795..c2d44ab 100755
--- a/lib/Vyatta/IpTables/AddressFilter.pm
+++ b/lib/Vyatta/IpTables/AddressFilter.pm
@@ -30,6 +30,13 @@ use strict;
use warnings;
my %_protocolswithports = (
+ tcp_udp => 1,
+ # 'tcp_udp' is to be allowed for nat and firewall rules only.
+ # features should have syntax checks for allowing or forbiding
+ # the use of 'tcp_udp' as protocol. to allow tcp_udp see syntax check
+ # in protocol/node.def for NAT rules and to forbid tcp_udp see syntax
+ # check in protocol/node.def for load-balancing rules
+ # when allowed : tcp_udp creates 2 iptable rules - one for tcp, other for udp
tcp => 1,
udp => 1,
6 => 1,