suricata: Scan outgoing traffic, too

Connections from the firewall and through the proxy must be filtered, too

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 9a79cb1aa98e8ae814ca1f1217ce1b0097adea98..a4fcee2ce10ccfa2f3d2251c051b2477e05a8fba 100644 (file)
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -189,6 +189,7 @@ iptables_init() {
        iptables -N IPS
        iptables -A INPUT -j IPS
        iptables -A FORWARD -j IPS
+       iptables -A OUTPUT -j IPS
 
        # Block non-established IPsec networks
        iptables -N IPSECBLOCK