From 3e79f33fc28e1f33a1b7599205ab86ae455d44c8 Mon Sep 17 00:00:00 2001 From: Alexander Marx Date: Tue, 30 Apr 2013 08:13:54 +0200 Subject: [PATCH] Forward Firewall: reordered some rules to get rid of INPUT_DROP messages in log when connected to webinterface --- src/initscripts/init.d/firewall | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall index df8405b52..ca1834051 100644 --- a/src/initscripts/init.d/firewall +++ b/src/initscripts/init.d/firewall @@ -303,11 +303,10 @@ case "$1" in if [ -x /etc/sysconfig/firewall.local ]; then /etc/sysconfig/firewall.local stop fi - + /sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT" if [ "$DROPINPUT" == "on" ]; then /sbin/iptables -A INPUT -m limit --limit 10/minute -j LOG --log-prefix "DROP_INPUT " fi - /sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT" if [ "$DROPFORWARD" == "on" ]; then /sbin/iptables -A FORWARD -m limit --limit 10/minute -j LOG --log-prefix "DROP_FORWARD " fi -- 2.39.2