From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 12 Apr 2014 14:17:20 +0000 (+0200)
Subject: firewall: Fix outgoing OpenVPN N2N tunnel packets.
X-Git-Url: http://git.ipfire.org/?p=people%2Fteissler%2Fipfire-2.x.git;a=commitdiff_plain;h=d22294fa7e70fa6eb907239ba00c2a0c7ae1863d;hp=cc81c4305319798f6c47a90acf8a84cdb7a281c8

firewall: Fix outgoing OpenVPN N2N tunnel packets.

Don't throw away packets from the firewall that pass through
an OpenVPN N2N tunnel.
---

diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall
index 31aa2c9b5..f0d9c492a 100644
--- a/src/initscripts/init.d/firewall
+++ b/src/initscripts/init.d/firewall
@@ -107,7 +107,6 @@ iptables_init() {
 	# Block OpenVPN transfer networks
 	iptables -N OVPNBLOCK
 	iptables -A INPUT   -i tun+ -j OVPNBLOCK
-	iptables -A OUTPUT  -o tun+ -j OVPNBLOCK
 	iptables -A FORWARD -i tun+ -j OVPNBLOCK
 	iptables -A FORWARD -o tun+ -j OVPNBLOCK