Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

vm/network: really place anti-spoof rules in 'raw' table

Browse Source 
This fixes commit:
4d68998 vm/network: place anti-spoof rules in 'raw' table
This commit is contained in:
Marek Marczykowski 2012-03-08 14:56:39 +01:00
parent a2afb6e054
commit 8a7906a016
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
network/vif-route-qubes
View File

@ -48,7 +48,7 @@ if [ "${ip}" ] ; then
${cmdprefix} ip route ${ipcmd} ${addr} dev ${vif} || true
done
echo ${cmdprefix} iptables -t raw $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
${cmdprefix} iptables $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
${cmdprefix} iptables -t raw $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
fi
log debug "Successful vif-route-qubes $command for $vif."