Forward Firewall: fixed icmp-types and deleted dmzholes chain

This commit is contained in:
Alexander Marx
2013-01-31 08:45:04 +01:00
committed by Michael Tremer
parent 8f1634ffbc
commit d6bdebd47d
2 changed files with 5 additions and 5 deletions

View File

@@ -242,9 +242,9 @@ case "$1" in
iptables_red
# DMZ pinhole chain. setdmzholes setuid prog adds rules here to allow
# DMZ pinhole chain.
# ORANGE to talk to GREEN / BLUE.
/sbin/iptables -N DMZHOLES
if [ "$ORANGE_DEV" != "" ]; then
/sbin/iptables -A FORWARD -i $ORANGE_DEV -m state --state NEW -j FORWARDFW
fi