From 63df10c2257decaabaf59c58c407f32aaafbe725 Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@freedombone.net>
Date: Tue, 26 Sep 2017 15:31:51 +0100
Subject: [PATCH] Original vpn firewall
---
src/freedombone-utils-firewall | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/freedombone-utils-firewall b/src/freedombone-utils-firewall
index ac1940c5a..fa839d696 100755
--- a/src/freedombone-utils-firewall
+++ b/src/freedombone-utils-firewall
@@ -111,7 +111,7 @@ function enable_ipv6 {
}
function firewall_disable_vpn {
- iptables -D INPUT -p udp --dport 1194 -j ACCEPT
+ iptables -D INPUT -i ${FIREWALL_EIFACE} -m state --state NEW -p udp --dport 1194 -j ACCEPT
iptables -D INPUT -p tcp --dport 1194 -j ACCEPT
iptables -D INPUT -i tun+ -j ACCEPT
iptables -D FORWARD -i tun+ -j ACCEPT
@@ -125,7 +125,7 @@ function firewall_disable_vpn {
}
function firewall_enable_vpn {
- iptables -A INPUT -p udp --dport 1194 -j ACCEPT
+ iptables -A INPUT -i ${FIREWALL_EIFACE} -m state --state NEW -p udp --dport 1194 -j ACCEPT
iptables -A INPUT -p tcp --dport 1194 -j ACCEPT
iptables -A INPUT -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -j ACCEPT
--
GitLab