]> git.ipfire.org Git - people/teissler/ipfire-2.x.git/commitdiff
firewall: Allow all classes of traffic outgoing from orange.
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 9 Mar 2010 21:25:03 +0000 (22:25 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 9 Mar 2010 21:25:03 +0000 (22:25 +0100)
Currently only tcp and udp are allowed but why are not
gre, icmp, etc.?!

src/initscripts/init.d/firewall

index bc511832dfcf13ae0a2b15072f37adddabd31666..55ab624a71e3075e1bbb2dc4216ac48eb07bcec9 100644 (file)
@@ -101,8 +101,7 @@ iptables_red() {
                # This rule enables a host on ORANGE network to connect to the outside
                # (only if we have a red connection)
                if [ "$IFACE" != "" ]; then
-                       /sbin/iptables -A REDFORWARD -i $ORANGE_DEV -p tcp -o $IFACE -j ACCEPT
-                       /sbin/iptables -A REDFORWARD -i $ORANGE_DEV -p udp -o $IFACE -j ACCEPT
+                       /sbin/iptables -A REDFORWARD -i $ORANGE_DEV -o $IFACE -j ACCEPT
                fi
        fi