This patch makes shorewall-lite
1. restore it's saved ruleset when a "restart" action is called on
the initscript rather than rebuilding it from scratch
2. install an "iface" hotplug script to restart shorewall-lite when
an interface changes state
Signed-off-by: Brian J. Murrell <[EMAIL PROTECTED]>
Index: net/shorewall-lite/files/shorewall-lite.init
===================================================================
--- net/shorewall-lite/files/shorewall-lite.init (revision 11527)
+++ net/shorewall-lite/files/shorewall-lite.init (working copy)
@@ -12,5 +12,9 @@
}
restart() {
- /sbin/shorewall-lite -qq restart
+ if [ -f /etc/shorewall-lite/state/restore ] ; then
+ /sbin/shorewall-lite -qq restore
+ else
+ /sbin/shorewall-lite -qq restart
+ fi
}
Index: net/shorewall-lite/Makefile
===================================================================
--- net/shorewall-lite/Makefile (revision 11527)
+++ net/shorewall-lite/Makefile (working copy)
@@ -2,7 +2,7 @@
PKG_NAME:=shorewall-lite
PKG_VERSION:=4.0.8
-PKG_RELEASE:=1
+PKG_RELEASE:=3
PKG_MD5SUM:=9eb449aed51d2f040c67baa23477b89c
PKG_SOURCE_URL:=http://www.shorewall.net/pub/shorewall/4.0/shorewall-$(PKG_VERSION)/
\
@@ -23,7 +23,7 @@
define Package/shorewall-lite
SECTION:=net
CATEGORY:=Network
- DEPENDS:=+ip +iptables +iptables-utils
+ DEPENDS:=+ip +iptables +iptables-utils +bc
TITLE:=Shorewall Lite
URL:=http://www.shorewall.net/
SUBMENU:=firewall
@@ -47,9 +47,11 @@
define Package/shorewall-lite/install
$(INSTALL_DIR) $(1)/sbin
$(INSTALL_DIR) $(1)/etc/init.d
+ $(INSTALL_DIR) $(1)/etc/hotplug.d/iface
$(INSTALL_DIR) $(1)/etc/shorewall-lite
$(INSTALL_DIR) $(1)/usr/share
$(INSTALL_BIN) ./files/shorewall-lite.init
$(1)/etc/init.d/shorewall-lite
+ $(INSTALL_BIN) ./files/hotplug_iface
$(1)/etc/hotplug.d/iface/05-shorewall-lite
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/sbin/shorewall-lite $(1)/sbin
$(CP) $(PKG_INSTALL_DIR)/usr/share/shorewall-lite $(1)/usr/share
$(INSTALL_BIN) ./files/hostname $(1)/usr/share/shorewall-lite
Cheers,
b.
signature.asc
Description: This is a digitally signed message part
_______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
