From 97a8e6281bdd0ccdd243fc7e5a8f8104c5c36975 Mon Sep 17 00:00:00 2001 From: Stig Thormodsrud Date: Thu, 14 Oct 2010 14:10:11 -0700 Subject: Add Iptables::Mgr route to get queue target. --- lib/Vyatta/IpTables/Rule.pm | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'lib/Vyatta/IpTables/Rule.pm') diff --git a/lib/Vyatta/IpTables/Rule.pm b/lib/Vyatta/IpTables/Rule.pm index 7b6c82b..e190a46 100755 --- a/lib/Vyatta/IpTables/Rule.pm +++ b/lib/Vyatta/IpTables/Rule.pm @@ -2,6 +2,7 @@ package Vyatta::IpTables::Rule; use strict; use Vyatta::Config; +use Vyatta::IpTables::Mgr; require Vyatta::IpTables::AddressFilter; my $src = new Vyatta::IpTables::AddressFilter; @@ -570,7 +571,9 @@ first character capitalized eg. Mon,Thu,Sat For negation, add ! in front eg. !Mo } elsif ("$self->{_action}" eq "reject") { $rule .= "-j REJECT "; } elsif ("$self->{_action}" eq 'inspect') { - $rule .= "-j QUEUE "; + my $target = ipt_get_queue_target('SNORT'); + return ('Undefined target for inspect', ) if ! defined $target; + $rule .= "-j $target "; } elsif ("$self->{_action}" eq 'modify') { # mangle actions my $count = 0; -- cgit v1.2.3