Repository :
http://git.fedorahosted.org/cgit/firewalld-recode.git
On branch : master
---------------------------------------------------------------
commit 564ecef947b2cdee6dcd2a3f2639ab9c8987c089
Author: Daniel Kopecek <dkopecek(a)redhat.com>
Date: Wed Oct 22 13:11:56 2014 +0200
Initialize the nat table in LinuxXTables backend
---------------------------------------------------------------
src/Daemon/Backends/LinuxXTables.cpp | 11 +++++++++--
1 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/src/Daemon/Backends/LinuxXTables.cpp b/src/Daemon/Backends/LinuxXTables.cpp
index 782172f..8f57893 100644
--- a/src/Daemon/Backends/LinuxXTables.cpp
+++ b/src/Daemon/Backends/LinuxXTables.cpp
@@ -87,7 +87,15 @@ namespace firewalld
//
// Initialize -t nat chains
//
-
+ ipXtables->newChain("nat", "PREROUTING_ZONES");
+ ipXtables->newChain("nat", "PREROUTING_ZONES_SOURCE");
+ ipXtables->insertRule("nat", "PREROUTING", "-j
PREROUTING_ZONES_SOURCE", 1);
+ ipXtables->insertRule("nat", "PREROUTING", "-j
PREROUTING_ZONES", 2);
+
+ ipXtables->newChain("nat", "POSTROUTING_ZONES");
+ ipXtables->newChain("nat", "POSTROUTING_ZONES_SOURCE");
+ ipXtables->insertRule("nat", "POSTROUTING", "-j
POSTROUTING_ZONES_SOURCE", 1);
+ ipXtables->insertRule("nat", "POSTROUTING", "-j
POSTROUTING_ZONES", 2);
}
}
@@ -117,7 +125,6 @@ namespace firewalld
String zone_name = op[1];
// XXX: Do we trust the input values?
-
for (IPTables * const ipXtables : { &_ip4tables, &_ip6tables }) {
for (const String& prefix : { "IN_", "FWDI_",
"FWDO_" }) {
for (const String& suffix : { "", "_allow", "_deny",
"_log" }) {