From d2fb7f90170a72cecd8d63570d432b99dc84de8f Mon Sep 17 00:00:00 2001 From: bbruns Date: Tue, 22 Feb 2011 02:32:14 +0000 Subject: [PATCH] Fix order of blockincoming --- bin/firewall-sosdg | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/bin/firewall-sosdg b/bin/firewall-sosdg index b68dc1f..7e1fecb 100755 --- a/bin/firewall-sosdg +++ b/bin/firewall-sosdg @@ -222,6 +222,11 @@ if [ "$DNS_REQUESTS_OUT" ]; then done fi +if [ -s "$BASEDIR/include/ipv4_custom_blockincoming" ]; then + display_c YELLOW "Loading custom incoming blocked rules..." + . "$BASEDIR/include/ipv4_custom_blockincoming" +fi + if [ -s "$BASEDIR/include/ipv4_custom_blockip" ]; then display_c YELLOW "Loading custom ip block rules..." . "$BASEDIR/include/ipv4_custom_blockip" @@ -704,10 +709,7 @@ $IPTABLES --policy OUTPUT ${IPV4_POUTPUT} $IPTABLES --policy FORWARD ${IPV4_PFORWARD} -if [ -s "$BASEDIR/include/ipv4_custom_blockincoming" ]; then - display_c YELLOW "Loading custom incoming blocked rules..." - . "$BASEDIR/include/ipv4_custom_blockincoming" -fi + if [ $BLOCKINCOMING ]; then $IPTABLES -A INPUT -p tcp --syn -j DROP