Changeset 11632 for branches

Timestamp:

11/11/08 14:07:26 (8 weeks ago)

Author:

juruen@…

Message:

Add rules to allow DHCP requests from interfaces configured via DHCP

Location:

branches/maintenance-0.12-0.12.10/hardy-base/client/firewall

Files:

• . (modified) (1 prop)
• ChangeLog (modified) (1 diff)
• configure.ac (modified) (1 diff)
• src/EBox/Iptables.pm (modified) (2 diffs)

branches/maintenance-0.12-0.12.10/hardy-base/client/firewall/ChangeLog

@@ +1 @@
+0.12.3
+        + Add rules to allow DHCP requests from interfaces configured via DHCP
 0.12.2
         + Disable annoying debug message

branches/maintenance-0.12-0.12.10/hardy-base/client/firewall/configure.ac

@@ -1 @@
-AC_INIT([EBox-firewall], [0.12.1])
+AC_INIT([EBox-firewall], [0.12.3])
 
 AC_CONFIG_AUX_DIR([config])

branches/maintenance-0.12-0.12.10/hardy-base/client/firewall/src/EBox/Iptables.pm

@@ -227 +227 @@
         pf "-A ointernal $new -p udp --dport 53 -d $dns -j ACCEPT";
         pf "-A fdns $new -p udp --dport 53 -d $dns -j ACCEPT";
+}
+
+# Method: setDHCP
+#
+#       Set output DHCP traffic 
+#
+# Parameters:
+#
+#       interface - 
+#
+sub setDHCP 
+{
+        my $self = shift;
+        my $interface = shift;
+        pf "-A ointernal $new -o $interface -p udp --dport 67 -j ACCEPT";
 }
 
@@ -400 +415 @@
                 $self->nospoof($ifc, $addrs);
                 if ($self->{net}->ifaceMethod($ifc) eq 'dhcp') {
+                        $self->setDHCP($ifc);
                         my $dnsSrvs = $self->{net}->DHCPNameservers($ifc);
                         foreach my $srv (@{$dnsSrvs}) {