From 25d1ce7e6df047a3896ce45b6d1ff303439fbd21 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Sat, 6 May 2006 18:55:25 +0000
Subject: [PATCH] Fix refresh for missing POSTROUTING mangle chain

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3884 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall/firewall | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/Shorewall/firewall b/Shorewall/firewall
index 95df76d4c..b17de0e5d 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -1775,10 +1775,13 @@ refresh_tc() {
     # Flush the TC mangle chains
     #
 
-    [ -n "$MANGLE_FORWARD" ] && run_iptables -t mangle -F tcfor
+    if [ -n "$MANGLE_FORWARD" ]; then
+	run_iptables -t mangle -F tcfor
+	run_iptables -t mangle -F tcpost
+    fi
+
     run_iptables -t mangle -F tcpre
     run_iptables -t mangle -F tcout
-    run_iptables -t mangle -F tcpost
     #
     # Remove all exclusion chains from the mangle table
     #