firewall: Fix initialization when RED has not been brought up yet

This commit is contained in:
Michael Tremer
2014-08-21 16:12:43 +02:00
parent 6de2306a6a
commit e7204c2d95

View File

@@ -369,8 +369,10 @@ iptables_red_down() {
# while the wan interface is down - this is required to
# circumvent udp related NAT issues
# http://forum.ipfire.org/index.php?topic=11127.0
iptables -F REDFORWARD
iptables -A REDFORWARD -o $IFACE -j DROP
if [ -n "${IFACE}" ]; then
iptables -F REDFORWARD
iptables -A REDFORWARD -o "${IFACE}" -j DROP
fi
# Reload all rules.
/usr/local/bin/firewallctrl