From 86b24f688ec17d59497fdecc4503a510ae26c05e Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Fri, 15 Oct 2004 19:05:34 +0000
Subject: [PATCH] Correct MSS IPSEC rule insertion

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1694 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall2/firewall | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall2/firewall b/Shorewall2/firewall
index 4bb5f76d7..db30801cc 100755
--- a/Shorewall2/firewall
+++ b/Shorewall2/firewall
@@ -1751,7 +1751,7 @@ setup_ipsec() {
 	eval local policy=\$${1}_policy
 	if [ "$policy" != NONE ]; then
 	    ensurechain $1
-	    run_iptables -A $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $mss
+	    run_iptables -I $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss $mss
 	fi
     }