diff options
| author | William Steve Applegate <wsapplegate@est.un.goret.info> | 2014-03-19 03:31:30 +0100 |
|---|---|---|
| committer | Daniil Baturin <daniil@baturin.org> | 2014-11-21 18:56:13 +0100 |
| commit | 17b7778bb9c1b98562b46b2352ac023f7da28bc1 (patch) | |
| tree | d00dcba694cd5420ac83794b3358e2b9b0fd576b /scripts/firewall | |
| parent | 5714efdadd7b13ff847f4d79d018d439f4efa052 (diff) | |
| download | vyatta-cfg-firewall-17b7778bb9c1b98562b46b2352ac023f7da28bc1.tar.gz vyatta-cfg-firewall-17b7778bb9c1b98562b46b2352ac023f7da28bc1.zip | |
Fix missing autogenerated chain for IPv6 policy routing.
Signed-off-by: Daniil Baturin <daniil@baturin.org>
Diffstat (limited to 'scripts/firewall')
| -rwxr-xr-x | scripts/firewall/vyatta-firewall.pl | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/scripts/firewall/vyatta-firewall.pl b/scripts/firewall/vyatta-firewall.pl index b29ded9..d9fca19 100755 --- a/scripts/firewall/vyatta-firewall.pl +++ b/scripts/firewall/vyatta-firewall.pl @@ -363,9 +363,13 @@ sub add_route_table { if ($table_count < 1) { my $mark = 0x7FFFFFFF + $table; system("ip rule add pref $table fwmark $mark table $table"); + system("ip -6 rule add pref $table fwmark $mark table $table"); run_cmd("iptables -t mangle -N VYATTA_PBR_$table", 1); run_cmd("iptables -t mangle -I VYATTA_PBR_$table 1 -j MARK --set-mark $mark", 1); run_cmd("iptables -t mangle -I VYATTA_PBR_$table 2 -j ACCEPT", 1); + run_cmd("ip6tables -t mangle -N VYATTA_PBR_$table", 1); + run_cmd("ip6tables -t mangle -I VYATTA_PBR_$table 1 -j MARK --set-mark $mark", 1); + run_cmd("ip6tables -t mangle -I VYATTA_PBR_$table 2 -j ACCEPT", 1); } write_refcnt_file($policy_ref_file, @newlines); @@ -393,7 +397,12 @@ sub remove_route_table { if ($ref < 1) { my $mark = 0x7FFFFFFF + $table; + system("ip -6 rule del pref $table fwmark $mark table $table"); system("ip rule del pref $table fwmark $mark table $table"); + run_cmd("ip6tables -t mangle -D VYATTA_PBR_$table 2", 1); + run_cmd("ip6tables -t mangle -D VYATTA_PBR_$table 1", 1); + run_cmd("ip6tables -t mangle -F VYATTA_PBR_$table", 1); + run_cmd("ip6tables -t mangle -X VYATTA_PBR_$table", 1); run_cmd("iptables -t mangle -D VYATTA_PBR_$table 2", 1); run_cmd("iptables -t mangle -D VYATTA_PBR_$table 1", 1); run_cmd("iptables -t mangle -F VYATTA_PBR_$table", 1); |