From: Alexander Marx Date: Wed, 12 Jun 2013 13:05:31 +0000 (+0200) Subject: Forward Firewall 0.9.9.7: reordered INPUT POLICY. X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ba899b6af6e30b403d0d0b5959acc3b1740a8cc5;p=people%2Fms%2Fipfire-2.x.git Forward Firewall 0.9.9.7: reordered INPUT POLICY. --- diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall index 94b869dd6b..a7d258a564 100644 --- a/src/initscripts/init.d/firewall +++ b/src/initscripts/init.d/firewall @@ -273,16 +273,6 @@ case "$1" in /etc/sysconfig/firewall.local start fi - /sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT" - - if [ "$DROPINPUT" == "on" ]; then - /sbin/iptables -A INPUT -m limit --limit 10/minute -j LOG --log-prefix "DROP_INPUT" - fi - if [ "$DROPFORWARD" == "on" ]; then - /sbin/iptables -A FORWARD -m limit --limit 10/minute -j LOG --log-prefix "DROP_FORWARD" - fi - /sbin/iptables -A FORWARD -j DROP -m comment --comment "DROP_FORWARD" - #POLICY CHAIN /sbin/iptables -N POLICYIN /sbin/iptables -A INPUT -j POLICYIN