From 6cb88973f53aa7d92414797dd21952c1c1d5da98 Mon Sep 17 00:00:00 2001 From: intrigeri Date: Sat, 7 Jan 2012 06:09:54 +0100 Subject: Support exempting some users from torification measures. --- manifests/rules/torify/redirect_tcp_to_tor.pp | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) (limited to 'manifests/rules/torify/redirect_tcp_to_tor.pp') diff --git a/manifests/rules/torify/redirect_tcp_to_tor.pp b/manifests/rules/torify/redirect_tcp_to_tor.pp index 2bee658..fe1c5fe 100644 --- a/manifests/rules/torify/redirect_tcp_to_tor.pp +++ b/manifests/rules/torify/redirect_tcp_to_tor.pp @@ -14,11 +14,6 @@ define shorewall::rules::torify::redirect_tcp_to_tor( default => $originaldest, } - $user_real = $user ? { - '-' => "!${shorewall::tor_user}", - default => $user, - } - $destzone = $shorewall::tor_transparent_proxy_host ? { '127.0.0.1' => '$FW', default => 'net' @@ -30,7 +25,7 @@ define shorewall::rules::torify::redirect_tcp_to_tor( destination => "${destzone}:${shorewall::tor_transparent_proxy_host}:${shorewall::tor_transparent_proxy_port}", proto => 'tcp:syn', originaldest => $originaldest_real, - user => $user_real, + user => $user, order => 110, action => 'DNAT'; } -- cgit v1.2.3