webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-10 19:15:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove from Input chain, changed order of the filters since

Browse Source 
the normal table contaings a drop rule and so the mac table would
never be reached. Still need to check if input is necessary.
This commit is contained in:
Christian Schmidt
2010-09-05 09:48:37 +02:00
parent d3f1f99927
commit 3f8fbea51d
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/initscripts/init.d/firewall
View File

@@ -183,9 +183,8 @@ case "$1" in
/sbin/iptables -t nat -A POSTROUTING -j IPSECNAT
# Outgoing Firewall
/sbin/iptables -A FORWARD -j OUTGOINGFW
/sbin/iptables -A FORWARD -j OUTGOINGFWMAC
/sbin/iptables -A INPUT -j OUTGOINGFWMAC
/sbin/iptables -A FORWARD -j OUTGOINGFW
# localhost and ethernet.
/sbin/iptables -A INPUT -i lo -m state --state NEW -j ACCEPT