Diff for scripts/shell/firewall/fw-universal.sh between version 2.41 and 2.42
version 2.41, 2006/03/04 02:43:23 |
version 2.42, 2006/03/12 22:23:40 |
Line 57 AWK="${AWK:=/usr/bin/awk}" |
|
Line 57 AWK="${AWK:=/usr/bin/awk}" |
|
|
|
# loopback interface |
# loopback interface |
LO_IFACE="${LO_IFACE:=lo}" |
LO_IFACE="${LO_IFACE:=lo}" |
|
# Hide NAT clients behind firewall |
|
NAT_SET_TTL="${NAT_SET_TTL:=no}" |
|
|
# |
# |
# CONSTANTS - Do not edit |
# CONSTANTS - Do not edit |
|
|
|
|
# hide NAT clients behind firewall: - set TTL |
# hide NAT clients behind firewall: - set TTL |
# XXX: warning: this breaks traceroute !!! |
# XXX: warning: this breaks traceroute !!! |
if [ "e$NAT_SET_TTL" = "eyes" ]; then |
if [ ! "a$NAT_SET_TTL" = "ano" ]; then |
echo "NAT: clients hidden behind firewall - setting TTL" |
echo "NAT: clients hidden behind firewall - setting TTL to $NAT_SET_TTL" |
$IPTABLES -t mangle -A POSTROUTING -o $NAT_LAN_IFACE -j TTL --ttl-set 64 |
$IPTABLES -t mangle -A POSTROUTING -o $NAT_LAN_IFACE -j TTL --ttl-set $NAT_SET_TTL |
fi |
fi |
|
|
|
|
Platon Group <platon@platon.org> http://platon.org/
|
|