]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commit
firewall: Add more rules to input/output when adding rules to forward
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 30 Apr 2019 09:45:34 +0000 (10:45 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 30 Apr 2019 09:45:34 +0000 (10:45 +0100)
commitae93dd3deb6524036943513e90d1fba84e3608bd
tree860c0d367d74de532ed7484baffdb6d11ba09c8a
parent68e0cf6714b4b2db76793bb36f5ccf11b76e5c02
firewall: Add more rules to input/output when adding rules to forward

The special_input/output_targets array assumed that firewall access
will always be denied. However, rules also need to be created when
access is granted. Therefore the ACCEPT target needs to be included
in this list and rules must be created in INPUTFW/OUTGOINGFW too
when ACCEPT rules are created in FORWARDFW.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/firewall/rules.pl