diff --git a/CHANGELOG b/CHANGELOG index 90a088f..54e8fa2 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,3 +1,6 @@ +2.1 Alpha 3 - 04/25.2016 + - Fix issue with erasing variables in services setup + 2.1 Alpha 2 - 03/15/2015 - Unset variables in loops to make sure theres no leakage of variables into the next run of the loop diff --git a/lib/iptables.inc b/lib/iptables.inc index faa69d9..6151675 100644 --- a/lib/iptables.inc +++ b/lib/iptables.inc @@ -514,10 +514,10 @@ function enable_services { ${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} loading" if [ -e "${FWCONFIGDIR}/ipv${IPVER}/services.conf" ]; then ${debug} ${DebugColor} "${FUNCNAME}:${DEFAULT_COLOR} read ${FWCONFIGDIR}/ipv${IPVER}/services.conf successful" - use_conntrack="no" - ([[ ${IP_VERSION} == "ipv4" ]] && [[ ${Enablev4ConnectionTracking} == "yes" ]]) && conntrack_state="${M_STATE} ${C_STATE} NEW" - ([[ ${IP_VERSION} == "ipv6" ]] && [[ ${Enablev6ConnectionTracking} == "yes" ]]) && conntrack_state="${M_STATE} ${C_STATE} NEW" while read -r service protocol interface address srcaddress; do + use_conntrack="no" + ([[ ${IP_VERSION} == "ipv4" ]] && [[ ${Enablev4ConnectionTracking} == "yes" ]]) && conntrack_state="${M_STATE} ${C_STATE} NEW" + ([[ ${IP_VERSION} == "ipv6" ]] && [[ ${Enablev6ConnectionTracking} == "yes" ]]) && conntrack_state="${M_STATE} ${C_STATE} NEW" multiport="no" [[ ${service} = \#* ]] && continue [[ -z ${service} ]] && continue