X-Git-Url: http://git.ipfire.org/?p=people%2Fteissler%2Fipfire-2.x.git;a=blobdiff_plain;f=src%2Finitscripts%2Finit.d%2Ffirewall;h=5a8cfb171e0437c41beda131def6ec2c7eb0e9c0;hp=a7d258a5643dd4eabb64c659ba5e3b3650cd2616;hb=e41b651b4a3b79bb072ac94835e96432ac1968dd;hpb=d9b691e18e59323e14dd37428fe9857ab95246b4

diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall
index a7d258a56..5a8cfb171 100644
--- a/src/initscripts/init.d/firewall
+++ b/src/initscripts/init.d/firewall
@@ -283,11 +283,10 @@ case "$1" in
 
 	/usr/sbin/firewall-policy
 
-	/sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT"
-
 	if [ "$DROPINPUT" == "on" ]; then
 		/sbin/iptables -A INPUT   -m limit --limit 10/minute -j LOG --log-prefix "DROP_INPUT"
 	fi
+	/sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT"
 	if [ "$DROPFORWARD" == "on" ]; then
 		/sbin/iptables -A FORWARD -m limit --limit 10/minute -j LOG --log-prefix "DROP_FORWARD"
 	fi