X-Git-Url: http://git.ipfire.org/?p=people%2Fteissler%2Fipfire-2.x.git;a=blobdiff_plain;f=config%2Fforwardfw%2Frules.pl;h=d62cca0d77dcb6f47a1d32206f3b5f0b54886a12;hp=f13bb5f16c91c55c1650dbe99c7188fefe2a93d5;hb=7f25a65fc1d53178453ad8cb820a9251a8755402;hpb=e17121fee73ba9adcc2d102d0127695613b780e8 diff --git a/config/forwardfw/rules.pl b/config/forwardfw/rules.pl index f13bb5f16..d62cca0d7 100755 --- a/config/forwardfw/rules.pl +++ b/config/forwardfw/rules.pl @@ -114,23 +114,6 @@ if($param eq 'flush'){ &p2pblock; system ("/usr/sbin/firewall-policy"); }elsif($fwdfwsettings{'POLICY'} eq 'MODE2'){ - $defaultNetworks{'GREEN_NETMASK'}=&General::iporsubtocidr($defaultNetworks{'GREEN_NETMASK'}); - $green="$defaultNetworks{'GREEN_ADDRESS'}/$defaultNetworks{'GREEN_NETMASK'}"; - if ($defaultNetworks{'BLUE_DEV'}){ - $defaultNetworks{'BLUE_NETMASK'}=&General::iporsubtocidr($defaultNetworks{'BLUE_NETMASK'}); - $blue="$defaultNetworks{'BLUE_ADDRESS'}/$defaultNetworks{'BLUE_NETMASK'}"; - #set default rules for BLUE - system ("iptables -A $CHAIN -s $blue -d $green -j RETURN"); - } - if ($defaultNetworks{'ORANGE_DEV'}){ - $defaultNetworks{'ORANGE_NETMASK'}=&General::iporsubtocidr($defaultNetworks{'ORANGE_NETMASK'}); - $orange="$defaultNetworks{'ORANGE_ADDRESS'}/$defaultNetworks{'ORANGE_NETMASK'}"; - #set default rules for DMZ - system ("iptables -A $CHAIN -s $orange -d $green -j RETURN"); - if ($defaultNetworks{'BLUE_DEV'}){ - system ("iptables -A $CHAIN -s $orange -d $blue -j RETURN"); - } - } &p2pblock; system ("iptables -A $CHAIN -m state --state NEW -j ACCEPT"); system ("/usr/sbin/firewall-policy");