diff --git a/rc.firewall b/rc.firewall index 48e0e60..0450e56 100755 --- a/rc.firewall +++ b/rc.firewall @@ -85,7 +85,7 @@ $IPTABLES -A INPUT -j DROP -p udp --dport domain -m u32 --u32 \ "0>>22&0x3C@12>>16=1&&0>>22&0x3C@20>>24=0&&0>>22&0x3C@21=0x00020001" if [ $CONNTRACK ]; then - $IPTABLES -A INPUT -i lo -m state --state NEW -j ACCEPT + $IPTABLES -A INPUT -m state --state NEW -j ACCEPT $IPTABLES -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT $IPTABLES -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT $IPTABLES -A FORWARD -m state --state NEW -j ACCEPT