From 7f9d09e8d3eeecc88a16ef5631f08039c3f35dfd Mon Sep 17 00:00:00 2001 From: Pierre Pronchery Date: Wed, 8 Aug 2018 14:21:40 +0200 Subject: [PATCH] Initialize the configuration for ip6tables as well --- server/config_init.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/server/config_init.c b/server/config_init.c index 225290aa..36bf2511 100644 --- a/server/config_init.c +++ b/server/config_init.c @@ -1031,6 +1031,16 @@ validate_options(fko_srv_options_t *opts) clean_exit(opts, NO_FW_CLEANUP, EXIT_FAILURE); } +#if FIREWALL_IPTABLES + if(opts->config[CONF_FIREWALL_EXE_IPV6] == NULL) + { + log_msg(LOG_ERR, + "[*] No firewall command executable is set for IPv6. Please check FIREWALL_EXE_IPV6 in fwknopd.conf." + ); + clean_exit(opts, NO_FW_CLEANUP, EXIT_FAILURE); + } +#endif + return; } @@ -1048,6 +1058,9 @@ set_preconfig_entries(fko_srv_options_t *opts) #ifdef FIREWALL_EXE set_config_entry(opts, CONF_FIREWALL_EXE, FIREWALL_EXE); #endif +#ifdef FIREWALL_EXE_IPV6 + set_config_entry(opts, CONF_FIREWALL_EXE_IPV6, FIREWALL_EXE_IPV6); +#endif }