|
|
@ -118,21 +118,21 @@ parse_matching_rule() {
|
|
|
|
append "$var" "-m comment --comment '$value'"
|
|
|
|
append "$var" "-m comment --comment '$value'"
|
|
|
|
;;
|
|
|
|
;;
|
|
|
|
*:tos)
|
|
|
|
*:tos)
|
|
|
|
add_insmod xt_dscp
|
|
|
|
add_insmod xt_dscp
|
|
|
|
case "$value" in
|
|
|
|
case "$value" in
|
|
|
|
!*) append "$var" "-m tos ! --tos $value";;
|
|
|
|
!*) append "$var" "-m tos ! --tos $value";;
|
|
|
|
*) append "$var" "-m tos --tos $value"
|
|
|
|
*) append "$var" "-m tos --tos $value"
|
|
|
|
esac
|
|
|
|
esac
|
|
|
|
;;
|
|
|
|
;;
|
|
|
|
*:dscp)
|
|
|
|
*:dscp)
|
|
|
|
add_insmod xt_dscp
|
|
|
|
add_insmod xt_dscp
|
|
|
|
dscp_option="--dscp"
|
|
|
|
dscp_option="--dscp"
|
|
|
|
[ -z "${value%%[EBCA]*}" ] && dscp_option="--dscp-class"
|
|
|
|
[ -z "${value%%[EBCA]*}" ] && dscp_option="--dscp-class"
|
|
|
|
case "$value" in
|
|
|
|
case "$value" in
|
|
|
|
!*) append "$var" "-m dscp ! $dscp_option $value";;
|
|
|
|
!*) append "$var" "-m dscp ! $dscp_option $value";;
|
|
|
|
*) append "$var" "-m dscp $dscp_option $value"
|
|
|
|
*) append "$var" "-m dscp $dscp_option $value"
|
|
|
|
esac
|
|
|
|
esac
|
|
|
|
;;
|
|
|
|
;;
|
|
|
|
*:direction)
|
|
|
|
*:direction)
|
|
|
|
value="$(echo "$value" | sed -e 's,-,:,g')"
|
|
|
|
value="$(echo "$value" | sed -e 's,-,:,g')"
|
|
|
|
if [ "$value" = "out" ]; then
|
|
|
|
if [ "$value" = "out" ]; then
|
|
|
@ -486,7 +486,7 @@ stop_firewall() {
|
|
|
|
-e 's/^-A/-D/' \
|
|
|
|
-e 's/^-A/-D/' \
|
|
|
|
-e '${p;g}' |
|
|
|
|
-e '${p;g}' |
|
|
|
|
# Make into proper iptables calls
|
|
|
|
# Make into proper iptables calls
|
|
|
|
# Note: awkward in previous call due to hold space usage
|
|
|
|
# Note: awkward in previous call due to hold space usage
|
|
|
|
sed -n -e "s/^./${command} -w -t mangle &/p"
|
|
|
|
sed -n -e "s/^./${command} -w -t mangle &/p"
|
|
|
|
done
|
|
|
|
done
|
|
|
|
}
|
|
|
|
}
|
|
|
|