firewall: Allow blocking access to GREEN from GREEN.

[people/teissler/ipfire-2.x.git] / config / firewall / firewall-policy

diff --git a/config/firewall/firewall-policy b/config/firewall/firewall-policy
index 16e98a5d4bb4b73f95e3bf1a38d9a6140eba9451..4ba1ace8cec12cee5aab07082e1c8d0cc107a053 100755 (executable)
--- a/config/firewall/firewall-policy
+++ b/config/firewall/firewall-policy
@@ -57,6 +57,9 @@ HAVE_OPENVPN="true"
 
 # INPUT
 
+# Allow access from GREEN
+iptables -A POLICYIN -i "${GREEN_DEV}" -j ACCEPT
+
 # IPsec INPUT
 case "${HAVE_IPSEC},${POLICY}" in
        true,MODE1) ;;
@@ -110,7 +113,6 @@ case "${POLICY}" in
                ;;
 
        *)
-
                # Access from GREEN is granted to everywhere
                if [ "${IFACE}" = "${GREEN_DEV}" ]; then
                        # internet via green