Forward Firewall: added "default-rules-table" at the end of forward ruletable

[people/teissler/ipfire-2.x.git] / config / forwardfw / firewall-policy

diff --git a/config/forwardfw/firewall-policy b/config/forwardfw/firewall-policy
index 9af835cc9cc92261f6333572a1ad855a7bf4f9d3..e142f2d3f44fc998aeca9eb50fb627b382f2ab81 100755 (executable)
--- a/config/forwardfw/firewall-policy
+++ b/config/forwardfw/firewall-policy
@@ -30,7 +30,9 @@ else
        if [  "$BLUE_DEV" ] && [ "$IFACE" ]; then
                /sbin/iptables -A POLICYFWD -i blue0 ! -o $IFACE -j DROP 
        fi
+       /sbin/iptables -A POLICYFWD -i orange0 ! -o $IFACE -j DROP
        /sbin/iptables -A POLICYFWD -j ACCEPT 
+       /sbin/iptables -A POLICYFWD -m comment --comment "DROP_FORWARD" -j DROP
 fi
 
 #OUTGOINGFW
@@ -49,6 +51,7 @@ if [ "$POLICY1" == "MODE1" ]; then
        fi
 else
        /sbin/iptables -A POLICYOUT -j ACCEPT 
+       /sbin/iptables -A POLICYOUT -m comment --comment "DROP_OUTPUT" -j DROP
 fi
 #INPUT
 if [ "$FWPOLICY2" == "REJECT" ]; then
@@ -63,3 +66,5 @@ if [ "$FWPOLICY2" == "DROP" ]; then
        fi
        /sbin/iptables -A POLICYIN -j DROP -m comment --comment "DROP_INPUT"
 fi
+
+exit 0