mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-14 04:52:59 +02:00
Forward Firewall: fixed portforward rules. Now possible even if firewall in mode1
This commit is contained in:
committed by
Michael Tremer
parent
5b7ed8bbae
commit
0b14d3d9b1
@@ -211,7 +211,7 @@ case "$1" in
|
||||
/sbin/iptables -A FORWARD -s 127.0.0.0/8 -m state --state NEW -j DROP
|
||||
/sbin/iptables -A FORWARD -d 127.0.0.0/8 -m state --state NEW -j DROP
|
||||
/sbin/iptables -A INPUT -i $GREEN_DEV -m state --state NEW -j ACCEPT ! -p icmp
|
||||
#/sbin/iptables -A FORWARD -i $GREEN_DEV -m state --state NEW -j ACCEPT
|
||||
/sbin/iptables -A FORWARD -i $GREEN_DEV -m state --state NEW -j ACCEPT
|
||||
|
||||
# If a host on orange tries to initiate a connection to IPFire's red IP and
|
||||
# the connection gets DNATed back through a port forward to a server on orange
|
||||
|
||||
Reference in New Issue
Block a user