More small fixes
parent
a65ee701a8
commit
3150b0f03f
20
rc.firewall
20
rc.firewall
|
@ -322,18 +322,20 @@ if [ $NAT ]; then
|
||||||
esac
|
esac
|
||||||
done
|
done
|
||||||
reset_color
|
reset_color
|
||||||
fi
|
fi
|
||||||
#=================
|
#=================
|
||||||
# This section is going away in 1.0
|
# This section is going away in 1.0
|
||||||
for i in $NATRANGE; do
|
if [ "$NATRANGE" ]; then
|
||||||
$IPTABLES -A POSTROUTING -t nat -s $i -o $NATEXTIF -j SNAT --to-source $NATEXTIP
|
for i in $NATRANGE; do
|
||||||
done
|
$IPTABLES -A POSTROUTING -t nat -s $i -o $NATEXTIF -j SNAT --to-source $NATEXTIP
|
||||||
#This is necessary to make sure that PMTU works
|
done
|
||||||
$IPTABLES -A OUTPUT -p icmp --icmp-type time-exceeded -o $NATEXTIF \
|
#This is necessary to make sure that PMTU works
|
||||||
-j ACCEPT
|
$IPTABLES -A OUTPUT -p icmp --icmp-type time-exceeded -o $NATEXTIF \
|
||||||
$IPTABLES -A OUTPUT -p icmp --icmp-type fragmentation-needed \
|
-j ACCEPT
|
||||||
-o $NATEXTIF -j ACCEPT
|
$IPTABLES -A OUTPUT -p icmp --icmp-type fragmentation-needed \
|
||||||
|
-o $NATEXTIF -j ACCEPT
|
||||||
#=================
|
#=================
|
||||||
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
$IPTABLES --policy INPUT ACCEPT
|
$IPTABLES --policy INPUT ACCEPT
|
||||||
|
|
Loading…
Reference in New Issue