From: xchaos <xchaos@251d49ef-1d17-4917-a970-b30cf55b089b>
Date: Thu, 24 Jan 2013 10:23:19 +0000 (+0000)
Subject: we must allow  -p ipv6-icmp  ...
X-Git-Url: https://git.harvie.cz/?a=commitdiff_plain;h=e36b49c7652e11488c5945113f8c62146a279578;p=svn%2FPrometheus-QoS%2F.git

we must allow  -p ipv6-icmp  ...



git-svn-id: https://dev.arachne.cz/repos/prometheus/trunk@213 251d49ef-1d17-4917-a970-b30cf55b089b
---

diff --git a/prometheus.c b/prometheus.c
index 48384a6..1f2910f 100644
--- a/prometheus.c
+++ b/prometheus.c
@@ -83,6 +83,7 @@ char             *mark = "MARK";
 char    *mark_iptables = "MARK --set-mark ";
 int            dry_run = FALSE; /* preview - use puts() instead of system() */
 char *iptablespreamble = "*mangle\n:PREROUTING ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]";
+char      *ip6preamble = "-A FORWARD -p ipv6-icmp -j ACCEPT\n-A POSTROUTING -p ipv6-icmp -j ACCEPT";
 FILE    *iptables_file = NULL;
 FILE   *ip6tables_file = NULL;
 int      enable_credit = TRUE; /* enable credit file */
@@ -619,6 +620,7 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
      exit(-1);
    }
    iptables_save_line(iptablespreamble, TRUE);
+   iptables_save_line(ip6preamble, TRUE);
   }
 
   run_iptables_restore();
@@ -643,6 +645,7 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
   {
    ip6tables_file=fopen(ip6tablesfile,"w");
    iptables_save_line(iptablespreamble, TRUE);
+   iptables_save_line(ip6preamble, TRUE);
   }
 
   if(qos_free_zone && *qos_free_zone!='0') /* this is currently supported only for IPv4 */
@@ -1054,7 +1057,7 @@ Credit: CZFree.Net, Martin Devera, Netdave, Aquarius, Gandalf\n\n",version);
  }
 
  /*-----------------------------------------------------------------*/
- puts("Generating iptables and tc classes ... ");
+ puts(" + generating iptables and tc classes ... ");
  /*-----------------------------------------------------------------*/
 
  for_each(ip, ips) if(ip->mark > 0) /* works only for IPv4 so far */