aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2014-03-31 16:09:30 +0300
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2014-03-31 16:13:11 +0300
commitaa07b35783de06474d485d07ae4c214bae305423 (patch)
tree796e6c980eca18d51de6e955646002a5d466d60f
parentff5d7618a71cdf11089e28bf85d43f0a3fd3ccd5 (diff)
downloadawall-aa07b35783de06474d485d07ae4c214bae305423.tar.bz2
awall-aa07b35783de06474d485d07ae4c214bae305423.tar.xz
optimize chain selection for related rules (always ACCEPT)
-rw-r--r--awall/modules/filter.lua14
1 files changed, 6 insertions, 8 deletions
diff --git a/awall/modules/filter.lua b/awall/modules/filter.lua
index e44d129..61098d5 100644
--- a/awall/modules/filter.lua
+++ b/awall/modules/filter.lua
@@ -1,6 +1,6 @@
--[[
Filter module for Alpine Wall
-Copyright (C) 2012-2013 Kaarle Ritvanen
+Copyright (C) 2012-2014 Kaarle Ritvanen
See LICENSE file for license details
]]--
@@ -36,6 +36,8 @@ function RelatedRule:servoptfrags()
return util.values(helpers)
end
+function RelatedRule:target() return 'ACCEPT' end
+
local Filter = model.class(model.Rule)
@@ -132,17 +134,13 @@ function Filter:trules()
if self.related then
for i, rule in listpairs(self.related) do
- extrarules(
- RelatedRule,
- {service=self.service, action='accept'},
- rule
- )
+ extrarules(RelatedRule, {service=self.service}, rule)
end
else
-- TODO avoid creating unnecessary RELATED rules by introducing
-- helper direction attributes to service definitions
- extrarules(RelatedRule, {action='accept'})
- extrarules(RelatedRule, {reverse=true, action='accept'})
+ extrarules(RelatedRule)
+ extrarules(RelatedRule, {reverse=true})
end
if self['no-track'] then