From 09541c7260c7e8aff4585e57b61af1388c6fca00 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Thu, 15 Sep 2005 16:11:54 +0000
Subject: [PATCH] Add output rules for routestopped hosts during 'start' and
 'restart'

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2690 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/firewall | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall/firewall b/Shorewall/firewall
index 3e2c42931..a77f78ef1 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -1955,7 +1955,7 @@ process_routestopped() # $1 = command
 	interface=${host%:*}
 	networks=${host#*:}
 	$IPTABLES $1 INPUT  -i $interface $(source_ip_range $networks) -j ACCEPT
-	[ -z "$ADMINISABSENTMINDED" ] && \
+	[ -z "$ADMINISABSENTMINDED" -o $COMMAND != stop ] && \
 	    run_iptables $1 OUTPUT -o $interface $(dest_ip_range $networks) -j ACCEPT
 
 	matched=