From: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed, 12 Aug 2015 11:44:26 +0000 (+0100)
Subject: firewall: Fix amanda helper
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2c4b9c5004f0db606612eba3965846d4a2623296;p=people%2Fms%2Fipfire-2.x.git

firewall: Fix amanda helper

This helper requires setting a layer 4 protocol.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall
index 978ac499ff..5b193c2c3b 100644
--- a/src/initscripts/init.d/firewall
+++ b/src/initscripts/init.d/firewall
@@ -149,7 +149,7 @@ iptables_init() {
 	if [ "${CONNTRACK_AMANDA}" = "on" ]; then
 		iptables -A CONNTRACK -m conntrack --ctstate RELATED \
 			-m helper --helper amanda -j ACCEPT
-		iptables -t raw -A CONNTRACK -j CT --helper amanda
+		iptables -t raw -A CONNTRACK -p tcp -j CT --helper amanda
 	fi
 
 	# Fix for braindead ISP's