From 2597d71b4a75a4a8abd278547b11b082306acecb Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Tue, 2 Mar 2004 00:04:55 +0000
Subject: [PATCH] Allow for routeback of stopped interfaces

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1179 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall2/changelog.txt    | 2 ++
 Shorewall2/firewall         | 4 +---
 Shorewall2/releasenotes.txt | 7 ++++---
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/Shorewall2/changelog.txt b/Shorewall2/changelog.txt
index 7a55bb63b..bab5ae6dc 100644
--- a/Shorewall2/changelog.txt
+++ b/Shorewall2/changelog.txt
@@ -52,3 +52,5 @@ Changes since 1.4.10
 25) Make detectnets and routeback play nice together.
 
 26) Avoid superfluous --state NEW tests.
+
+27) Allow backrouting of 'routestopped' devices.
diff --git a/Shorewall2/firewall b/Shorewall2/firewall
index 9de8057ee..e8da02f57 100755
--- a/Shorewall2/firewall
+++ b/Shorewall2/firewall
@@ -1056,9 +1056,7 @@ stop_firewall() {
 	    iptables -A OUTPUT -o $interface -d $subnet -j ACCEPT
 
 	for host1 in $hosts; do
-	    [ "$host" != "$host1" ] && \
-		iptables -A FORWARD -i $interface -s $subnet \
-		    -o ${host1%:*} -d ${host1#*:} -j ACCEPT
+	    iptables -A FORWARD -i $interface -s $subnet -o ${host1%:*} -d ${host1#*:} -j ACCEPT
 	done
     done
 
diff --git a/Shorewall2/releasenotes.txt b/Shorewall2/releasenotes.txt
index 44a35b6c4..a67fba027 100755
--- a/Shorewall2/releasenotes.txt
+++ b/Shorewall2/releasenotes.txt
@@ -15,10 +15,11 @@ Problems Corrected since 1.4.10
 4) The 'detectnets' and 'routeback' options may now be used together
    with the intended effect.
 
-Problems Corrected since Beta 3
+Problems Corrected since RC1
 
-1) The REJECT target now works correctly for TCP (sends an RST).
-   Previously, an ICMP reply was generated.
+1) After a "shorewall stop", traffic routed back to networks in
+   the /etc/shorewall/routestopped file is accepted. This is required
+   to allow traffic through a bridge while shorewall is stopped.
 -----------------------------------------------------------------------
 Issues when migrating from Shorewall 1.4.x to Shorewall 2.0.0: