From 4eadec234a4534a7f8ec26c2d8bbb62eb81d5957 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Sun, 2 Mar 2014 08:25:05 -0800 Subject: [PATCH] Revert "Correct the behavior of ADMINISABSENTMINDED" This reverts commit ded747a51a6403628eaa8beac6ceab2c82d57892. --- Shorewall/Perl/Shorewall/Misc.pm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm index 879f76d7c..c64369b1d 100644 --- a/Shorewall/Perl/Shorewall/Misc.pm +++ b/Shorewall/Perl/Shorewall/Misc.pm @@ -2512,9 +2512,9 @@ EOF "restore_default_route $config{USE_DEFAULT_RT}" ); - if ( $config{ADMINISABSENTMINDED} ) { - add_ijump $filter_table ->{$_}, j => 'ACCEPT', state_imatch 'ESTABLISHED,RELATED' for qw/INPUT FORWARD/; - } + my @chains = $config{ADMINISABSENTMINDED} ? qw/INPUT FORWARD/ : qw/INPUT OUTPUT FORWARD/; + + add_ijump $filter_table ->{$_}, j => 'ACCEPT', state_imatch 'ESTABLISHED,RELATED' for @chains; if ( $family == F_IPV6 ) { add_ijump $input, j => 'ACCEPT', s => IPv6_LINKLOCAL;