-
This commit is contained in:
@@ -53,10 +53,13 @@ __main() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
for cgid in "${_cgroup_ids[@]}"; do
|
for cgid in "${_cgroup_ids[@]}"; do
|
||||||
|
if [[ $cgid -eq 0 ]]; then
|
||||||
|
continue
|
||||||
|
fi
|
||||||
for cmd in iptables ip6tables; do
|
for cmd in iptables ip6tables; do
|
||||||
$cmd -t mangle -N "$_chain" 2>/dev/null || true
|
$cmd -t mangle -N "$_chain" 2>/dev/null || true
|
||||||
if ! $cmd -t mangle -C OUTPUT -o '!lo' -m cgroup --cgroup "$cgid" -j "$_chain" 2>/dev/null; then
|
if ! $cmd -t mangle -C OUTPUT ! -o 'lo' -m cgroup --cgroup "$cgid" -j "$_chain" 2>/dev/null; then
|
||||||
$cmd -t mangle -I OUTPUT 1 -o '!lo' -m cgroup --cgroup "$cgid" -j "$_chain"
|
$cmd -t mangle -I OUTPUT 1 ! -o 'lo' -m cgroup --cgroup "$cgid" -j "$_chain"
|
||||||
fi
|
fi
|
||||||
if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
|
if ! $cmd -t mangle -C "$_chain" -j RETURN 2>/dev/null; then
|
||||||
$cmd -t mangle -A "$_chain" -j RETURN
|
$cmd -t mangle -A "$_chain" -j RETURN
|
||||||
|
|||||||
Reference in New Issue
Block a user