]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commitdiff
firewall: Split OpenVPN INPUT chains for RW & N2N
authorMichael Tremer <michael.tremer@ipfire.org>
Thu, 21 Mar 2024 15:51:39 +0000 (16:51 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Thu, 21 Mar 2024 15:51:39 +0000 (16:51 +0100)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
src/initscripts/system/firewall

index 69bdcb594bb671da0f31cbe91f0022c3da808cb9..518c8bf31a716724d24f8e1e1299590380532bdd 100644 (file)
@@ -323,9 +323,13 @@ iptables_init() {
        iptables -N WIRELESSFORWARD
        iptables -A FORWARD -m conntrack --ctstate NEW -j WIRELESSFORWARD
 
-       # OpenVPN
-       iptables -N OVPNINPUT
-       iptables -A INPUT -j OVPNINPUT
+       # OpenVPN Roadwarrior
+       iptables -N OVPNINPUTRW
+       iptables -A INPUT -j OVPNINPUTRW
+
+       # OpenVPN N2N
+       iptables -N OVPNINPUTN2N
+       iptables -A INPUT -j OVPNINPUTN2N
 
        # Tor (outbound)
        iptables -N TOR_OUTPUT