summaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
authorMohit Mehta <mohit.mehta@vyatta.com>2009-01-29 18:47:50 -0800
committerMohit Mehta <mohit.mehta@vyatta.com>2009-01-29 18:47:50 -0800
commitc232d373f0783d850a5cf844a6d9b76e50c7a85f (patch)
treee8c7466074b9615606b7793cc9efee8498d505c5 /scripts
parente4146d5e14a8f63ec454b39c6a069e151b54ab1b (diff)
downloadvyatta-cfg-firewall-c232d373f0783d850a5cf844a6d9b76e50c7a85f.tar.gz
vyatta-cfg-firewall-c232d373f0783d850a5cf844a6d9b76e50c7a85f.zip
Use iptables comment to identify CLI rule numbers in iptables output
Diffstat (limited to 'scripts')
-rwxr-xr-xscripts/firewall/vyatta-firewall.pl2
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/firewall/vyatta-firewall.pl b/scripts/firewall/vyatta-firewall.pl
index 058e9cf..2176b11 100755
--- a/scripts/firewall/vyatta-firewall.pl
+++ b/scripts/firewall/vyatta-firewall.pl
@@ -575,7 +575,7 @@ sub setup_iptables($) {
sub add_default_drop_rule($$$) {
my ($table, $chain, $iptables_cmd) = @_;
# system("$iptables_cmd -t $table -A $chain -j DROP 2>&1 | $logger");
- run_cmd("$iptables_cmd -t $table -A $chain -j DROP", 1, 1);
+ run_cmd("$iptables_cmd -t $table -A $chain -m comment --comment \"$chain-1025\" -j DROP", 1, 1);
}
sub setup_chain($$$) {