Commit cd0d0a79 authored by Branko Mikić's avatar Branko Mikić
Browse files

~ Quick fix to adopt the Makefile which used obsolete statements and produced a malformed ruleset.

parent 9498bb11
......@@ -24,39 +24,36 @@ all: IPv4.rules IPv6.rules
IPv4.rules:
./ipturntables.sh -4 \
KERNEL_PARAMS accept_source_route,accept_redirects,rp_filter,ip_forward \
PROBE_KERNEL_MODS ip_tables,nf_conntrack \
RESET \
BASE_RULE_SET \
ALLOW_SUBNETS eth0 \
ALLOW_SERVICE_DISCOVERY eth0 \
FORWARD_SUBNET_PROTECTIVE $(SUBNET) ppp0 \
POSTROUTING_MASQUERADE $(SUBNET) ppp0 \
>IPv4.rules
KERNEL_PARAMS accept_source_route,accept_redirects,rp_filter,ip_forward \
PROBE_KERNEL_MODS ip_tables,nf_conntrack \
RESET \
BASE_RULE_SET \
ALLOW_SUBNETS eth0 \
ALLOW_SERVICE_DISCOVERY eth0 \
>IPv4.rules
cat IPv4.rules
IPv6.rules:
./ipturntables.sh -6 \
KERNEL_PARAMS accept_source_route,accept_redirects,accept_ra,forwarding \
PROBE_KERNEL_MODS ip6_tables,nf_conntrack \
RESET \
BASE_RULE_SET \
ALLOW_SUBNETS eth0 \
ALLOW_SERVICE_DISCOVERY eth0 \
ALLOW_DHCPV6_CLIENT ppp0 \
>IPv6.rules
KERNEL_PARAMS accept_source_route,accept_redirects,accept_ra,forwarding \
PROBE_KERNEL_MODS ip6_tables,nf_conntrack \
RESET \
BASE_RULE_SET \
ALLOW_SUBNETS eth0 \
ALLOW_SERVICE_DISCOVERY eth0 \
>IPv6.rules
cat IPv6.rules
debug.rules:
./ipturntables.sh -4 \
DEBUG_CHAIN INPUT
DEBUG_CHAIN OUTPUT
DEBUG_CHAIN FORWARD
DEBUG_CHAIN INPUT
DEBUG_CHAIN OUTPUT
DEBUG_CHAIN FORWARD
./ipturntables.sh -6 \
DEBUG_CHAIN INPUT
DEBUG_CHAIN OUTPUT
DEBUG_CHAIN FORWARD
DEBUG_CHAIN INPUT
DEBUG_CHAIN OUTPUT
DEBUG_CHAIN FORWARD
clean:
rm *.rules
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment