From 78f6b862e02173d879cd57545afae1e0a56d9b26 Mon Sep 17 00:00:00 2001 From: bbruns Date: Sat, 12 Apr 2014 20:17:07 +0000 Subject: [PATCH] --- lib/iptables.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/iptables.inc b/lib/iptables.inc index 9372853..7883cd6 100644 --- a/lib/iptables.inc +++ b/lib/iptables.inc @@ -464,7 +464,7 @@ function enable_nat { [[ ${srcaddress} == "-" ]] && srcaddress="" ${VER_IPTABLES} -A ${NAT} -t nat ${srcaddress} ${action} ${dstinterface} ${dstaddress} - ${VER_IPTABLES} -A ${FwdFilter} ${M_STATE} ${C_STATE} RELATED,ESTABLISHED ${srcinterface} ${srcaddress} ${dstinterface} -j ACCEPT + ${VER_IPTABLES} -A ${FwdFilter} ${M_STATE} ${C_STATE} RELATED,ESTABLISHED,NEW ${srcinterface} ${srcaddress} ${dstinterface} -j ACCEPT ${VER_IPTABLES} -A ${FwdFilter} ${M_STATE} ${C_STATE} RELATED,ESTABLISHED ${revsrcinterface} ${revsrcaddress} ${revdstinterface} -j ACCEPT done < "${FWCONFIGDIR}/ipv${IPVER}/nat.conf" ${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} done"