[HLFL] Re: Unknown arg `--reject-with'
Stephane Bortzmeyer
bortzmeyer at nic.fr
Fri Apr 7 16:57:45 EDT 2006
On Fri, Apr 07, 2006 at 04:35:20PM +0200,
Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote
a message of 26 lines which said:
> iptables v1.2.11: Unknown arg `--reject-with'
It seems indeed a bug in hlfl and the attached patch seems to fix it.
-------------- next part --------------
--- src/linux_netfilter.c~ 2003-06-17 00:17:59.000000000 +0200
+++ src/linux_netfilter.c 2006-04-07 17:10:05.339040878 +0200
@@ -193,11 +193,11 @@
/* Add extra rules specific to tcp protocol, when protocol is all */
if (!strcmp(proto, "all")) {
fprintf(fout,
- "$iptables --append ALL --source %s --destination %s --protocol tcp %s %s --jump %sREJECT --reject-with tcp-reset %s\n",
- src, dst, sports_as_src, dports_as_dst, logit, via_out);
+ "$iptables --append ALL --source %s --destination %s --protocol tcp %s %s --jump %sREJECT %s %s\n",
+ src, dst, sports_as_src, dports_as_dst, logit, rejectit, via_out);
fprintf(fout,
- "$iptables --append ALL --source %s --destination %s --protocol tcp %s %s --jump %sREJECT --reject-with tcp-reset %s\n",
- dst, src, dports_as_src, sports_as_dst, logit, via_in);
+ "$iptables --append ALL --source %s --destination %s --protocol tcp %s %s --jump %sREJECT %s %s\n",
+ dst, src, dports_as_src, sports_as_dst, logit, rejectit, via_in);
}
fprintf(fout,
"$iptables --append ALL --source %s --destination %s --protocol %s %s %s --jump %sREJECT %s %s\n",
@@ -222,8 +222,8 @@
/* Add an extra rule specific to tcp protocol, when protocol is all */
if (!strcmp(proto, "all")) {
fprintf(fout,
- "$iptables --append ALL --source %s --destination %s --protocol tcp %s %s --jump %sREJECT --reject-with tcp-reset %s\n",
- src, dst, sports_as_src, dports_as_dst, logit, via_out);
+ "$iptables --append ALL --source %s --destination %s --protocol tcp %s %s --jump %sREJECT %s %s\n",
+ src, dst, sports_as_src, dports_as_dst, logit, rejectit, via_out);
}
fprintf(fout,
"$iptables --append ALL --source %s --destination %s --protocol %s %s %s --jump %sREJECT %s %s\n",
More information about the hlfl
mailing list