firewall: Fix connection tracking for PPTP

[people/pmueller/ipfire-2.x.git] / src / initscripts / init.d / firewall

diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall
index cb52670d6a5e42c5dbf7fd809fd1350d66a8a00d..1d6309c1b0d50a8b26013362669a1e6e797a0c40 100644 (file)
--- a/src/initscripts/init.d/firewall
+++ b/src/initscripts/init.d/firewall
@@ -128,7 +128,7 @@ iptables_init() {
        if [ "${CONNTRACK_PPTP}" = "on" ]; then
                iptables -A CONNTRACK -m conntrack --ctstate RELATED \
                        -m helper --helper pptp -j ACCEPT
-               iptables -t raw -A CONNTRACK -p udp --dport 1723 -j CT --helper pptp
+               iptables -t raw -A CONNTRACK -p tcp --dport 1723 -j CT --helper pptp
        fi
 
        # TFTP