From d25c92104d22de2c402a7d0b4425106e38a0babe Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Sat, 19 May 2012 22:25:47 +0200 Subject: [PATCH] fw forwarding updates for fischer, II --- modules/ferm/manifests/per-host.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index 93ac18f18..d3a8a29aa 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -181,7 +181,7 @@ interface br0 outerface br0 ACCEPT; interface br1 outerface br1 ACCEPT; interface br2 outerface br0 jump from-kfreebsd; -interface br0 destination ($ADDRESS_FISCHER) proto tcp dport 22 ACCESS; +interface br0 destination ($ADDRESS_FISCHER) proto tcp dport 22 ACCEPT; interface br0 destination ($FREEBSD_HOSTS) jump to-kfreebsd; ULOG ulog-prefix "REJECT FORWARD: "; REJECT reject-with icmp-admin-prohibited -- 2.20.1