Forward Firewall: Bugfix: blue was allowed to connect to everywhere if forward firewa...

diff --git a/config/forwardfw/firewall-policy b/config/forwardfw/firewall-policy
index 303a7561b31ab4db2e373da641535830fe01cce6..55287dd074518f3185c8f31241adcb13d12f2bf9 100755 (executable)
--- a/config/forwardfw/firewall-policy
+++ b/config/forwardfw/firewall-policy
@@ -6,6 +6,7 @@ eval $(/usr/local/bin/readhash /var/ipfire/optionsfw/settings)
 iptables -F POLICYFWD
 iptables -F POLICYOUT
 iptables -F POLICYIN
+IFACE=`cat /var/ipfire/red/iface`
 
 #FORWARDFW
 if [ "$POLICY" == "MODE1" ]; then
@@ -22,6 +23,7 @@ if [ "$POLICY" == "MODE1" ]; then
                        /sbin/iptables -A POLICYFWD -j DROP -m comment --comment "DROP_FORWARD"
                fi
 else
+       /sbin/iptables -A POLICYFWD -i blue0 ! -o $IFACE -j DROP -m comment --comment "DROP_FORWARD_BLUE"
        /sbin/iptables -A POLICYFWD -j ACCEPT -m comment --comment "DROP_FORWARD"
 fi