- remove implicit creation of zones, based on network interfaces
SVN-Revision: 12281
config_foreach load_zones zone
-IFACE=$(find_config $INTERFACE)
-[ -n "$IFACE" ] &&
- list_contains ZONE $IFACE || ZONE="$ZONE $IFACE"
+[ -z "$ZONE" ] && exit 0
[ ifup = "$ACTION" ] && {
for z in $ZONE; do
$IPTABLES -A INPUT -p tcp --syn -j SYN_FLOOD
}
-create_network_zone() {
- create_zone "$1" "$1"
-}
-
fw_defaults() {
load_policy $1
DEF_INPUT=$input
config_foreach fw_defaults defaults
echo "Loading zones"
config_foreach fw_zone zone
- echo "Loading interfaces"
- config_foreach create_network_zone interface
echo "Loading rules"
config_foreach fw_rule rule
echo "Loading forwarding"