Browse Source

Fix some issues with conntracking rules

tags/v2.01a1
bbruns 7 years ago
parent
commit
13f378819c
1 changed files with 0 additions and 3 deletions
  1. +0
    -3
      lib/iptables.inc

+ 0
- 3
lib/iptables.inc View File

@@ -420,10 +420,7 @@ function enable_forwarding {
[[ ${state} == "-" ]] && state=""
[[ ${protocol} == "-" ]] && protocol=""
[[ ${bidirectional} == "-" ]] && bidirectional="no"
[[ ${action} == "DROP" ]] && conntrack_state=""

${VER_IPTABLES} -A ${FwdFilter} ${protocol} ${srcinterface} ${srcaddress} ${srcport} ${syn} ${dstinterface} ${dstaddress} ${dstport} ${conntrack_state} -j ${action}
[[ ${bidirectional} == "yes" ]] && ${VER_IPTABLES} -A ${FwdFilter} ${protocol} ${revsrcinterface} ${revsrcaddress} ${revsrcport} ${syn} ${revdstinterface} ${revdstaddress} ${revdstport} ${conntrack_state} -j ${action}
done < "${FWCONFIGDIR}/ipv${IPVER}/forward.conf"


Loading…
Cancel
Save