Date: Tue, 1 May 2001 23:05:39 +0200 (CEST) From: thomas@cuivre.fr.eu.org To: FreeBSD-gnats-submit@freebsd.org Subject: bin/27016: ipnat should not require existence of ipfilter rules file. Message-ID: <20010501210539.3209E24D02@melusine.cuivre.fr.eu.org>
next in thread | raw e-mail | index | archive | help
>Number: 27016
>Category: bin
>Synopsis: ipnat should not require existence of ipfilter rules file.
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue May 01 14:10:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator: Thomas Quinot
>Release: FreeBSD 4.3-STABLE i386
>Organization:
>Environment:
System: FreeBSD melusine.cuivre.fr.eu.org 4.3-STABLE FreeBSD 4.3-STABLE #2: Tue May 1 20:28:53 CEST 2001 thomas@melusine.cuivre.fr.eu.org:/usr/obj/usr/src/sys/MELUSINE i386
>Description:
rc.network does not examine ipnat_enable and possibly
launch ipnat if ipfilter_enable is not set to YES
*and* and ipfilter rules file exists.
This seems to be an unnecessary restrictions, because
in some situations one may want to use ipnat without
ipfilter rules.
>How-To-Repeat:
>Fix:
--- /etc/rc.network Tue May 1 22:42:57 2001
+++ /tmp/rc.network Tue May 1 23:00:19 2001
@@ -60,20 +60,20 @@
${ipmon_program:-/sbin/ipmon} ${ipmon_flags}
;;
esac
- case "${ipnat_enable}" in
- [Yy][Ee][Ss])
- if [ -r "${ipnat_rules}" ]; then
- echo -n ' ipnat';
- eval ${ipnat_program:-/sbin/ipnat -CF -f} \
- "${ipnat_rules}" ${ipnat_flags}
- else
- echo -n ' NO IPNAT RULES'
- fi
- ;;
- esac
else
ipfilter_enable="NO"
echo -n ' NO IPF RULES'
+ fi
+ ;;
+ esac
+ case "${ipnat_enable}" in
+ [Yy][Ee][Ss])
+ if [ -r "${ipnat_rules}" ]; then
+ echo -n ' ipnat';
+ eval ${ipnat_program:-/sbin/ipnat -CF -f} \
+ "${ipnat_rules}" ${ipnat_flags}
+ else
+ echo -n ' NO IPNAT RULES'
fi
;;
esac
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010501210539.3209E24D02>