Blame SOURCES/0020-fix-rich-source-dest-only-matching-with-mark-action.patch
|
 |
66253d |
From b15d3998fc9cbc6fbaa5f54596cf6ae4af80c6b4 Mon Sep 17 00:00:00 2001
|
|
|
66253d |
From: Eric Garver <eric@garver.life>
|
|
|
66253d |
Date: Wed, 15 Jan 2020 10:41:29 -0500
|
|
|
66253d |
Subject: [PATCH 20/37] fix: rich: source/dest only matching with mark action
|
|
|
66253d |
|
|
|
66253d |
We need to make sure the pre-requisite chains exist before generating
|
|
|
66253d |
the rule for the mark action.
|
|
|
66253d |
|
|
|
66253d |
Fixes: #567
|
|
|
66253d |
(cherry picked from commit 4997385a269b2128281f346ba6e049a41767d165)
|
|
|
66253d |
(cherry picked from commit 16c70554005a2a8dc7947c94f0fcc7cc401de3d0)
|
|
|
66253d |
---
|
|
|
66253d |
src/firewall/core/fw_zone.py | 2 ++
|
|
|
66253d |
1 file changed, 2 insertions(+)
|
|
|
66253d |
|
|
|
66253d |
diff --git a/src/firewall/core/fw_zone.py b/src/firewall/core/fw_zone.py
|
|
|
66253d |
index cbb80f09e02f..5cda560a30e1 100644
|
|
|
66253d |
--- a/src/firewall/core/fw_zone.py
|
|
|
66253d |
+++ b/src/firewall/core/fw_zone.py
|
|
|
66253d |
@@ -1720,6 +1720,8 @@ class FirewallZone(object):
|
|
|
66253d |
elif rule.element is None:
|
|
|
66253d |
if enable:
|
|
|
66253d |
transaction.add_chain(zone, "filter", "INPUT")
|
|
|
66253d |
+ if enable and type(rule.action) == Rich_Mark:
|
|
|
66253d |
+ transaction.add_chain(zone, "mangle", "PREROUTING")
|
|
|
66253d |
|
|
|
66253d |
rules = backend.build_zone_rich_source_destination_rules(
|
|
|
66253d |
enable, zone, rule)
|
|
|
66253d |
--
|
|
|
66253d |
2.23.0
|
|
|
66253d |
|