-
This commit is contained in:
@@ -50,8 +50,8 @@ __main() {
|
||||
for cgid in "${_cgroup_ids[@]}"; do
|
||||
for cmd in iptables ip6tables; do
|
||||
$cmd -t mangle -N "$_chain" 2>/dev/null || true
|
||||
if ! $cmd -t mangle -C OUTPUT -m cgroup --cgroup "$cgid" -j "$_chain" 2>/dev/null; then
|
||||
$cmd -t mangle -A OUTPUT -m cgroup --cgroup "$cgid" -j "$_chain"
|
||||
if ! $cmd -t mangle -C OUTPUT -m cgroup --cgroup "$cgid" -m addrtype ! --dst-type LOCAL -j "$_chain" 2>/dev/null; then
|
||||
$cmd -t mangle -A OUTPUT -m cgroup --cgroup "$cgid" -m addrtype ! --dst-type LOCAL -j "$_chain"
|
||||
fi
|
||||
if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
|
||||
$cmd -t mangle -A "$_chain" -j RETURN
|
||||
|
||||
Reference in New Issue
Block a user