From 035c394ac89841f15df544f8d7963feac24de288 Mon Sep 17 00:00:00 2001 From: teastep Date: Mon, 9 Apr 2007 17:23:55 +0000 Subject: [PATCH] Fix FASTACCEPT=Yes git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5874 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-perl/Shorewall/Rules.pm | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Shorewall-perl/Shorewall/Rules.pm b/Shorewall-perl/Shorewall/Rules.pm index 3118132f5..8af999a40 100644 --- a/Shorewall-perl/Shorewall/Rules.pm +++ b/Shorewall-perl/Shorewall/Rules.pm @@ -1651,6 +1651,12 @@ sub generate_matrix() { nat=> [ qw/PREROUTING OUTPUT POSTROUTING/ ] , filter=> [ qw/INPUT FORWARD OUTPUT/ ] ); + if ( $config{FASTACCEPT} ) { + for my $chain ( @{$builtins{filter}} ) { + add_rule $filter_table->{$chain}, "-m state --state ESTABLISHED,RELATED -j ACCEPT"; + } + } + if ( $config{LOGALLNEW} ) { for my $table qw/mangle nat filter/ { for my $chain ( @{$builtins{$table}} ) {