]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commitdiff
firewall: Split OpenVPN INPUT chains for RW & N2N
authorMichael Tremer <michael.tremer@ipfire.org>
Thu, 21 Mar 2024 15:51:39 +0000 (16:51 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Mon, 23 Sep 2024 11:10:27 +0000 (13:10 +0200)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
src/initscripts/system/firewall

index 6727e4a20c009025da4cc509d57957475f2ea5b1..15b5d09fbfefdd87b3f07fdf7c0e08a96899cae3 100644 (file)
@@ -343,9 +343,13 @@ iptables_init() {
        iptables -N WIRELESSFORWARD
        iptables -A FORWARD -m conntrack --ctstate NEW -j WIRELESSFORWARD
 
-       # OpenVPN
-       iptables -N OVPNINPUT
-       iptables -A INPUT -j OVPNINPUT
+       # OpenVPN Roadwarrior
+       iptables -N OVPNINPUTRW
+       iptables -A INPUT -j OVPNINPUTRW
+
+       # OpenVPN N2N
+       iptables -N OVPNINPUTN2N
+       iptables -A INPUT -j OVPNINPUTN2N
 
        # Tor (outbound)
        iptables -N TOR_OUTPUT