]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit - src/initscripts/system/firewall
firewall: Only check relevant bits for NAT fix rules
authorMichael Tremer <michael.tremer@ipfire.org>
Mon, 4 Oct 2021 17:52:17 +0000 (18:52 +0100)
committerArne Fitzenreiter <arne_f@ipfire.org>
Wed, 13 Oct 2021 11:45:48 +0000 (11:45 +0000)
commitce31144c629354d32fcb41ea69f0dbc5e426eea7
tree19e4ea097c0155923c643fa5a417bb671ebd8884
parent5c372259e3132fa77a8238400b707d7aa398dc15
firewall: Only check relevant bits for NAT fix rules

In order to use the highest two bits for surciata bypass, we will need
to make sure that whenever we compare any other marks, we do not care
about anything else.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
config/firewall/rules.pl
src/initscripts/system/firewall