From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 21 Mar 2024 15:51:39 +0000 (+0100)
Subject: firewall: Split OpenVPN INPUT chains for RW & N2N
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b3465095a11b88125057149912c11abeea1ddfd6;p=people%2Fms%2Fipfire-2.x.git

firewall: Split OpenVPN INPUT chains for RW & N2N

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 69bdcb594..518c8bf31 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -323,9 +323,13 @@ iptables_init() {
 	iptables -N WIRELESSFORWARD
 	iptables -A FORWARD -m conntrack --ctstate NEW -j WIRELESSFORWARD
 
-	# OpenVPN
-	iptables -N OVPNINPUT
-	iptables -A INPUT -j OVPNINPUT
+	# OpenVPN Roadwarrior
+	iptables -N OVPNINPUTRW
+	iptables -A INPUT -j OVPNINPUTRW
+
+	# OpenVPN N2N
+	iptables -N OVPNINPUTN2N
+	iptables -A INPUT -j OVPNINPUTN2N
 
 	# Tor (outbound)
 	iptables -N TOR_OUTPUT