firewall: Insert VPN rules at the beginning.

This commit is contained in:
gardouille 2015-09-16 17:56:59 +02:00
parent 15c3382f2f
commit e1b4d59b4f
1 changed files with 2 additions and 2 deletions

View File

@ -302,8 +302,8 @@ fw_stop() {
# VPN
fw_vpn() {
# Allow all traffic throught VPN
$IPT -A INPUT -j ACCEPT -p all -i "${ILAN}" -m state --state NEW,RELATED,ESTABLISHED -m comment --comment "VPN in"
$IPT -A OUTPUT -j ACCEPT -p all -o "${ILAN}" -m state --state NEW,RELATED,ESTABLISHED,UNTRACKED -m comment --comment "VPN out"
$IPT -I INPUT -j ACCEPT -p all -i "${ILAN}" -m state --state NEW,RELATED,ESTABLISHED -m comment --comment "VPN in"
$IPT -I OUTPUT -j ACCEPT -p all -o "${ILAN}" -m state --state NEW,RELATED,ESTABLISHED,UNTRACKED -m comment --comment "VPN out"
}
# **********************************************************************************************