summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlex Harpin <development@landsofshadow.co.uk>2015-06-24 08:13:03 +0100
committerAlex Harpin <development@landsofshadow.co.uk>2015-06-24 08:13:03 +0100
commita93427602058cff462b7ed5e32d3242f801edf3b (patch)
treeb9d709c45c7c1cbf8e9e8397009f9be961aa5657
parent4dfe90fecbbf1010e043e9440ebefcbadf907f8c (diff)
downloadvyatta-cfg-firewall-a93427602058cff462b7ed5e32d3242f801edf3b.tar.gz
vyatta-cfg-firewall-a93427602058cff462b7ed5e32d3242f801edf3b.zip
vyatta-cfg-firewall: add port 1536 to the initial ct helper chain
Add port 1536 to the initial VYATTA_CT_HELPER chain inline with the conntrack sqlnet module change in vyatta-conntrack. Bug #412 http://bugzilla.vyos.net/show_bug.cgi?id=412
-rw-r--r--scripts/firewall/firewall.init.in1
1 files changed, 1 insertions, 0 deletions
diff --git a/scripts/firewall/firewall.init.in b/scripts/firewall/firewall.init.in
index e6487f1..98ed54a 100644
--- a/scripts/firewall/firewall.init.in
+++ b/scripts/firewall/firewall.init.in
@@ -69,6 +69,7 @@ start () {
iptables -t raw -I VYATTA_CT_HELPER -p udp --dport 111 -j CT --helper rpc
iptables -t raw -I VYATTA_CT_HELPER -p tcp --dport 1521 -j CT --helper tns
iptables -t raw -I VYATTA_CT_HELPER -p tcp --dport 1525 -j CT --helper tns
+ iptables -t raw -I VYATTA_CT_HELPER -p tcp --dport 1536 -j CT --helper tns
iptables -t raw -A VYATTA_CT_HELPER -j RETURN
# set up notrack chains/rules for IPv4