diff --git a/ip6t-firewall-gateway b/ip6t-firewall-gateway index 8a5b76d..84e1ea2 100755 --- a/ip6t-firewall-gateway +++ b/ip6t-firewall-gateway @@ -274,14 +274,16 @@ if [[ ${#ext_if_arr[@]} -lt 1 ]] ; then fatal "No extern Interface is configured!" fi +echo + # ------------- # --- Pass through Devices Interfaces (not firewalled) # ------------- +echononl "\tPass through Devices (not firewalled)" if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then - echononl "\tPass through Devices (not firewalled)" for _dev in ${unprotected_if_arr[@]} ; do if $log_unprotected || $log_all ; then $ip6t -A INPUT -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " @@ -299,9 +301,29 @@ if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then fi done echo_done +else + echo_skipped fi +# ------------- +# --- Traffic generally allowed +# ------------- + +echononl "\tLoopback device generally allowed.." + +# --- +# - Loopback device +# --- + +$ip6t -A INPUT -i lo -j ACCEPT +$ip6t -A OUTPUT -o lo -j ACCEPT + +echo_done + +echo + + # ------------- # --- Block IPs / Networks / Interfaces @@ -820,22 +842,6 @@ echo_done echo -# ------------- -# --- Traffic generally allowed -# ------------- - -echononl "\tLoopback device generally allowed.." - -# --- -# - Loopback device -# --- - -$ip6t -A INPUT -i lo -j ACCEPT -$ip6t -A OUTPUT -o lo -j ACCEPT - -echo_done - - # --- # - Already established connections # --- diff --git a/ipt-firewall-gateway b/ipt-firewall-gateway index 7c1d33a..a70c611 100755 --- a/ipt-firewall-gateway +++ b/ipt-firewall-gateway @@ -618,14 +618,15 @@ else echo_skipped fi +echo # ------------- # --- Pass through Devices Interfaces (not firewalled) # ------------- +echononl "\tPass through Devices (not firewalled)" if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then - echononl "\tPass through Devices (not firewalled)" for _dev in ${unprotected_if_arr[@]} ; do if $log_unprotected || $log_all ; then $ipt -A INPUT -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " @@ -643,9 +644,29 @@ if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then fi done echo_done +else + echo_skipped fi +# ------------- +# --- Traffic generally allowed +# ------------- + +echononl "\tLoopback device generally allowed.." + +# --- +# - Loopback device +# --- + +$ipt -A INPUT -i lo -j ACCEPT +$ipt -A OUTPUT -o lo -j ACCEPT + +echo_done + +echo + + # ------------- # --- Block IPs / Networks / Interfaces @@ -1455,22 +1476,6 @@ echo_done echo -# ------------- -# --- Traffic generally allowed -# ------------- - -echononl "\tLoopback device generally allowed.." - -# --- -# - Loopback device -# --- - -$ipt -A INPUT -i lo -j ACCEPT -$ipt -A OUTPUT -o lo -j ACCEPT - -echo_done - - # --- # - Already established connections # ---