Forward Firewall: deleted creation of OVPNFORWARD and the accept rule.

This commit is contained in:
Alexander Marx
2013-03-01 10:43:25 +01:00
committed by Michael Tremer
parent ec329c0699
commit 443a6e8a5f

View File

@@ -255,8 +255,8 @@ void setChainRules(char *chain, char *interface, char *protocol, char *port)
executeCommand(str);
sprintf(str, "/sbin/iptables -A %sINPUT -i tun+ -j ACCEPT", chain);
executeCommand(str);
sprintf(str, "/sbin/iptables -A %sFORWARD -i tun+ -j ACCEPT", chain);
executeCommand(str);
//sprintf(str, "/sbin/iptables -A %sFORWARD -i tun+ -j ACCEPT", chain);
//executeCommand(str);
}
void flushChain(char *chain) {
@@ -264,8 +264,8 @@ void flushChain(char *chain) {
sprintf(str, "/sbin/iptables -F %sINPUT", chain);
executeCommand(str);
sprintf(str, "/sbin/iptables -F %sFORWARD", chain);
executeCommand(str);
//sprintf(str, "/sbin/iptables -F %sFORWARD", chain);
//executeCommand(str);
safe_system(str);
}
@@ -282,8 +282,8 @@ void deleteChainReference(char *chain) {
sprintf(str, "/sbin/iptables -D INPUT -j %sINPUT", chain);
executeCommand(str);
safe_system(str);
sprintf(str, "/sbin/iptables -D FORWARD -j %sFORWARD", chain);
executeCommand(str);
//sprintf(str, "/sbin/iptables -D FORWARD -j %sFORWARD", chain);
//executeCommand(str);
safe_system(str);
}
@@ -292,8 +292,8 @@ void deleteChain(char *chain) {
sprintf(str, "/sbin/iptables -X %sINPUT", chain);
executeCommand(str);
sprintf(str, "/sbin/iptables -X %sFORWARD", chain);
executeCommand(str);
//sprintf(str, "/sbin/iptables -X %sFORWARD", chain);
//executeCommand(str);
}
void deleteAllChains(void) {
@@ -313,16 +313,16 @@ void createChainReference(char *chain) {
char str[STRING_SIZE];
sprintf(str, "/sbin/iptables -I INPUT %s -j %sINPUT", "14", chain);
executeCommand(str);
sprintf(str, "/sbin/iptables -I FORWARD %s -j %sFORWARD", "12", chain);
executeCommand(str);
//sprintf(str, "/sbin/iptables -I FORWARD %s -j %sFORWARD", "12", chain);
//executeCommand(str);
}
void createChain(char *chain) {
char str[STRING_SIZE];
sprintf(str, "/sbin/iptables -N %sINPUT", chain);
executeCommand(str);
sprintf(str, "/sbin/iptables -N %sFORWARD", chain);
executeCommand(str);
//sprintf(str, "/sbin/iptables -N %sFORWARD", chain);
//executeCommand(str);
}
void createAllChains(void) {