From 1a68d87c9499ccdffafad59b126e235cc8a7b8ee Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Thu, 4 Jan 2018 15:39:07 -0800
Subject: [PATCH] Don't enable forwarding in 'clear'

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 Shorewall/Perl/lib.runtime | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/Shorewall/Perl/lib.runtime b/Shorewall/Perl/lib.runtime
index 4b294e673..be7f1be7a 100644
--- a/Shorewall/Perl/lib.runtime
+++ b/Shorewall/Perl/lib.runtime
@@ -1065,8 +1065,6 @@ clear_firewall() {
     run_iptables -F
     qt $IPTABLES -t raw -F
 
-    echo 1 > /proc/sys/net/ipv4/ip_forward
-
     if [ -n "$DISABLE_IPV6" ]; then
 	if [ -x $IP6TABLES ]; then
     	    $IP6TABLES -P INPUT   ACCEPT 2> /dev/null
@@ -1375,8 +1373,6 @@ clear_firewall() {
     run_iptables -F
     qt $IP6TABLES -t raw -F
 
-    echo 1 > /proc/sys/net/ipv6/conf/all/forwarding
-
     run_clear_exit
 
     set_state "Cleared"