diff options
author | Mohit Mehta <mohit.mehta@vyatta.com> | 2009-08-05 12:28:30 -0700 |
---|---|---|
committer | Mohit Mehta <mohit.mehta@vyatta.com> | 2009-08-05 12:28:30 -0700 |
commit | 7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb (patch) | |
tree | 2a7e68d997f3012362366ca61b2b90baee9b1eee /lib/Vyatta | |
parent | f51a7d45564720a6e7af25dea13581b5de63b29d (diff) | |
download | vyatta-cfg-firewall-7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb.tar.gz vyatta-cfg-firewall-7afc355b7a0d2cd9bcd698c1eaaea59ccfea4ebb.zip |
add tcp_udp as a valid key to hash. feature developer is responsible
for allowing user to use tcp_udp as a valid protocol. currently, this
option is planned to be used for NAT and firewall only
Diffstat (limited to 'lib/Vyatta')
-rwxr-xr-x | lib/Vyatta/IpTables/AddressFilter.pm | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/lib/Vyatta/IpTables/AddressFilter.pm b/lib/Vyatta/IpTables/AddressFilter.pm index 01c2795..c2d44ab 100755 --- a/lib/Vyatta/IpTables/AddressFilter.pm +++ b/lib/Vyatta/IpTables/AddressFilter.pm @@ -30,6 +30,13 @@ use strict; use warnings; my %_protocolswithports = ( + tcp_udp => 1, + # 'tcp_udp' is to be allowed for nat and firewall rules only. + # features should have syntax checks for allowing or forbiding + # the use of 'tcp_udp' as protocol. to allow tcp_udp see syntax check + # in protocol/node.def for NAT rules and to forbid tcp_udp see syntax + # check in protocol/node.def for load-balancing rules + # when allowed : tcp_udp creates 2 iptable rules - one for tcp, other for udp tcp => 1, udp => 1, 6 => 1, |