From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Fri, 8 Mar 2013 16:31:38 +0000 (+0100)
Subject: firewall: fix UPNPFW chain/rules creation order.
X-Git-Tag: v2.13-core67~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=42cb38607fcd1b3590ed3d74bfd53d89626cd0fb;p=ipfire-2.x.git

firewall: fix UPNPFW chain/rules creation order.
---

diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall
index cc6b6190eb..b6dd7d5bd9 100644
--- a/src/initscripts/init.d/firewall
+++ b/src/initscripts/init.d/firewall
@@ -252,9 +252,8 @@ case "$1" in
 	# upnp chain for our upnp daemon
 	/sbin/iptables -t nat -N UPNPFW
 	/sbin/iptables -t nat -A PREROUTING -j UPNPFW
-	/sbin/iptables -A FORWARD -m state --state NEW -j UPNPFW
-	# This chain only contains dummy rules.
 	/sbin/iptables -N UPNPFW
+	/sbin/iptables -A FORWARD -m state --state NEW -j UPNPFW
 
 	# Custom mangle chain (for port fowarding)
 	/sbin/iptables -t mangle -N PORTFWMANGLE