From 3f8fbea51d91b3fbabdb0e901e6fcc376db41b04 Mon Sep 17 00:00:00 2001 From: Christian Schmidt Date: Sun, 5 Sep 2010 09:48:37 +0200 Subject: [PATCH] Remove from Input chain, changed order of the filters since the normal table contaings a drop rule and so the mac table would never be reached. Still need to check if input is necessary. --- src/initscripts/init.d/firewall | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall index b9f3908303..366ae071c8 100644 --- a/src/initscripts/init.d/firewall +++ b/src/initscripts/init.d/firewall @@ -183,9 +183,8 @@ case "$1" in /sbin/iptables -t nat -A POSTROUTING -j IPSECNAT # Outgoing Firewall - /sbin/iptables -A FORWARD -j OUTGOINGFW /sbin/iptables -A FORWARD -j OUTGOINGFWMAC - /sbin/iptables -A INPUT -j OUTGOINGFWMAC + /sbin/iptables -A FORWARD -j OUTGOINGFW # localhost and ethernet. /sbin/iptables -A INPUT -i lo -m state --state NEW -j ACCEPT -- 2.39.2