This fixes bug #0000707 new extra chain for guardian.

[ipfire-2.x.git] / config / guardian / guardian_block.sh

diff --git a/config/guardian/guardian_block.sh b/config/guardian/guardian_block.sh
index a35c58a0a60fcaa0c602a826b4ab9f2d0e44013d..0a44325f187755e5047d63a1105eb17f8fc1f3b7 100644 (file)
--- a/config/guardian/guardian_block.sh
+++ b/config/guardian/guardian_block.sh
@@ -2,11 +2,10 @@
 
 # this is a sample block script for guardian. This should work with ipchains. 
 # This command gets called by guardian as such:
-#  guardian_block.sh <source_ip> <interface>
+#  guardian_block.sh <source_ip>
 # and the script will issue a command to block all traffic from that source ip
 # address. The logic of weither or not it is safe to block that address is
 # done inside guardian itself.
 source=$1
-interface=$2
 
-/sbin/iptables -I INPUT -s $source -i $interface -j DROP
+/sbin/iptables -I GUARDIANINPUT -s $source -j DROP