sad/firehol
1
0
Fork 0
mirror of https://github.com/firehol/firehol.git synced 2024-06-28 18:02:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

made TPROXY helper use the maximum usermark instead of a fixed one #25 #23

Browse Source
This commit is contained in:
Costa Tsaousis (ktsaou) 2015-01-22 23:09:18 +02:00
parent 76267346c0
commit 89bca91217
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sbin/firehol.in
View File

@ -3192,16 +3192,18 @@ transparent_squid() {
transparent_proxy 80 "$@"
}
FIREHOL_TPROXY_MARK="0xffff/0xffff"
FIREHOL_TPROXY_IP_ROUTE_TABLE="999"
FIREHOL_TPROXY_MARK=
FIREHOL_TPROXY_IP_ROUTE_TABLE="241"
FIREHOL_TPROXY_ROUTE_DEVICE="lo"
tproxy_setup_ip_route() {
require_cmd ip
local x=
for x in inet inet6
do
# remove the existing ip rules for this mark
postprocess -ne ${IP_CMD} -f $x rule del from all fwmark $FIREHOL_TPROXY_MARK
postprocess -ne ${IP_CMD} -f $x rule del lookup $FIREHOL_TPROXY_IP_ROUTE_TABLE
# remove the existing rules from the ip route table
postprocess -ne ${IP_CMD} -f $x route flush table $FIREHOL_TPROXY_IP_ROUTE_TABLE
@ -3229,6 +3231,11 @@ tproxy() {
local ports="${1}"; shift
if [ -z "${FIREHOL_TPROXY_MARK}" ]
then
FIREHOL_TPROXY_MARK="$[ MARKS_MAX[usermark] << MARKS_SHIFT[usermark] ]/${MARKS_MASKS[usermark]}"
fi
local tproxy_action_options="tproxy-mark $FIREHOL_TPROXY_MARK"
local tport=
local tip=