added iptables rules for DNS enforcement

julsemaan · julsemaan · commit c21076a6cb05 · 2016-02-16T17:08:03.000-05:00
diff --git a/lib/pf/iptables.pm b/lib/pf/iptables.pm
@@ -172,7 +172,7 @@ sub generate_filter_if_src_to_chain {
 
         my $cluster_ip = $ConfigCluster{$CLUSTER}->{"interface $dev"}->{ip};
         # VLAN enforcement
-        if ($enforcement_type eq $IF_ENFORCEMENT_VLAN) {
+        if ($enforcement_type eq $IF_ENFORCEMENT_VLAN || $enforcement_type eq $IF_ENFORCEMENT_DNS) {
             if ($dev =~ m/(\w+):\d+/) {
                 $dev = $1;
             }

Original file line number	Diff line number	Diff line change
`@@ -172,7 +172,7 @@ sub generate_filter_if_src_to_chain {`
`172`	`172`
`173`	`173`	`my $cluster_ip = $ConfigCluster{$CLUSTER}->{"interface $dev"}->{ip};`
`174`	`174`	`# VLAN enforcement`
`175`		`- if ($enforcement_type eq $IF_ENFORCEMENT_VLAN) {`
	`175`	`+ if ($enforcement_type eq $IF_ENFORCEMENT_VLAN \|\| $enforcement_type eq $IF_ENFORCEMENT_DNS) {`
`176`	`176`	`if ($dev =~ m/(\w+):\d+/) {`
`177`	`177`	`$dev = $1;`
`178`	`178`	`}`