From: Alexander Marx Date: Mon, 17 Jun 2013 08:21:24 +0000 (+0200) Subject: Forward Firewall: changed order of LOG and DROP rules for INPUT Chain X-Git-Tag: v2.15-beta1~286^2~11^2~59 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e41b651b4a3b79bb072ac94835e96432ac1968dd;p=ipfire-2.x.git Forward Firewall: changed order of LOG and DROP rules for INPUT Chain --- diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall index a7d258a564..5a8cfb171e 100644 --- a/src/initscripts/init.d/firewall +++ b/src/initscripts/init.d/firewall @@ -283,11 +283,10 @@ case "$1" in /usr/sbin/firewall-policy - /sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT" - if [ "$DROPINPUT" == "on" ]; then /sbin/iptables -A INPUT -m limit --limit 10/minute -j LOG --log-prefix "DROP_INPUT" fi + /sbin/iptables -A INPUT -j DROP -m comment --comment "DROP_INPUT" if [ "$DROPFORWARD" == "on" ]; then /sbin/iptables -A FORWARD -m limit --limit 10/minute -j LOG --log-prefix "DROP_FORWARD" fi