This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, next has been updated via 139a9b4fa189c63c94544a556e593e8c83c07a05 (commit) from 2f2b526964081aab5872404691c2c3615e45da12 (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit 139a9b4fa189c63c94544a556e593e8c83c07a05 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Mar 9 22:25:03 2010 +0100

firewall: Allow all classes of traffic outgoing from orange.

Currently only tcp and udp are allowed but why are not gre, icmp, etc.?!

-----------------------------------------------------------------------

Summary of changes: src/initscripts/init.d/firewall | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-)

Difference in files: diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall index bc51183..55ab624 100644 --- a/src/initscripts/init.d/firewall +++ b/src/initscripts/init.d/firewall @@ -101,8 +101,7 @@ iptables_red() { # This rule enables a host on ORANGE network to connect to the outside # (only if we have a red connection) if [ "$IFACE" != "" ]; then - /sbin/iptables -A REDFORWARD -i $ORANGE_DEV -p tcp -o $IFACE -j ACCEPT - /sbin/iptables -A REDFORWARD -i $ORANGE_DEV -p udp -o $IFACE -j ACCEPT + /sbin/iptables -A REDFORWARD -i $ORANGE_DEV -o $IFACE -j ACCEPT fi fi

hooks/post-receive -- IPFire 2.x development tree