/[smeserver]/rpms/e-smith-pptpd/sme9/e-smith-pptpd-2.4.0-negation.patch
ViewVC logotype

Annotation of /rpms/e-smith-pptpd/sme9/e-smith-pptpd-2.4.0-negation.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (hide annotations) (download)
Tue Feb 19 19:26:38 2013 UTC (11 years, 8 months ago) by vip-ire
Branch: MAIN
CVS Tags: e-smith-pptpd-2_4_0-2_el6_sme, HEAD
* Tue Feb 19 2013 Daniel Berteaud <daniel@firewall-services.com> 2.4.0-2.sme
- Use extrapositioned negation in iptables rules [SME: 7262]

1 vip-ire 1.1 diff -Nur e-smith-pptpd-2.4.0/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowGRE e-smith-pptpd-2.4.0-negation/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowGRE
2     --- e-smith-pptpd-2.4.0/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowGRE 2002-09-13 01:29:10.000000000 +0200
3     +++ e-smith-pptpd-2.4.0-negation/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowGRE 2013-02-19 20:21:40.344626367 +0100
4     @@ -5,5 +5,5 @@
5     } /sbin/iptables --new-chain gre-in
6     /sbin/iptables --append INPUT -p 47 -j gre-in
7     /sbin/iptables --append INPUT -p 47 -j denylog
8     - /sbin/iptables --append gre-in -d \! $OUTERNET -j denylog
9     + /sbin/iptables --append gre-in ! -d $OUTERNET -j denylog
10     /sbin/iptables --append gre-in -j denylog
11     diff -Nur e-smith-pptpd-2.4.0/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustGRE e-smith-pptpd-2.4.0-negation/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustGRE
12     --- e-smith-pptpd-2.4.0/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustGRE 2003-07-09 17:58:14.000000000 +0200
13     +++ e-smith-pptpd-2.4.0-negation/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustGRE 2013-02-19 20:22:22.887283243 +0100
14     @@ -4,6 +4,6 @@
15     my $target = ($pptpd_status eq 'enabled') ? "ACCEPT" : "denylog";
16    
17     $OUT =
18     - " /sbin/iptables --replace gre-in 1 -d \\! \$OUTERNET -j denylog\n" .
19     + " /sbin/iptables --replace gre-in 1 ! -d \$OUTERNET -j denylog\n" .
20     " /sbin/iptables --replace gre-in 2 -j $target";
21     }

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed