Blame SOURCES/0009-fw_zone-fix-rich-rule-masquerading.patch
|
|
21c891 |
From 2bb98f4881d6ac73644e1a98c69032dd40e45c2f Mon Sep 17 00:00:00 2001
|
|
|
21c891 |
From: Eric Garver <e@erig.me>
|
|
|
21c891 |
Date: Wed, 5 Dec 2018 13:09:28 -0500
|
|
|
21c891 |
Subject: [PATCH 09/34] fw_zone: fix rich rule masquerading
|
|
|
21c891 |
|
|
|
21c891 |
We weren't passing the rich rule to the backend so filtering on
|
|
|
21c891 |
source/destination would not work.
|
|
|
21c891 |
|
|
|
21c891 |
(cherry picked from commit 14acf26afe09ff9092bebbfc7ffe718b1758c573)
|
|
|
21c891 |
(cherry picked from commit bd784bfd009859583b3606268d6109f8aff6c037)
|
|
|
21c891 |
---
|
|
|
21c891 |
src/firewall/core/fw_zone.py | 2 +-
|
|
|
21c891 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
21c891 |
|
|
|
21c891 |
diff --git a/src/firewall/core/fw_zone.py b/src/firewall/core/fw_zone.py
|
|
|
21c891 |
index ca90f7fba0d4..816fa50340b3 100644
|
|
|
21c891 |
--- a/src/firewall/core/fw_zone.py
|
|
|
21c891 |
+++ b/src/firewall/core/fw_zone.py
|
|
|
21c891 |
@@ -1690,7 +1690,7 @@ class FirewallZone(object):
|
|
|
21c891 |
if backend.is_ipv_supported(ipv):
|
|
|
21c891 |
zone_transaction.add_post(enable_ip_forwarding, ipv)
|
|
|
21c891 |
|
|
|
21c891 |
- rules = backend.build_zone_masquerade_rules(enable, zone)
|
|
|
21c891 |
+ rules = backend.build_zone_masquerade_rules(enable, zone, rule)
|
|
|
21c891 |
zone_transaction.add_rules(backend, rules)
|
|
|
21c891 |
|
|
|
21c891 |
# FORWARD PORT
|
|
|
21c891 |
--
|
|
|
21c891 |
2.18.0
|
|
|
21c891 |
|