Add support for FreeIPA Service on local networks.

ip6t-firewall-gateway

@@ -4649,6 +4649,29 @@ else
 fi
 
 
+# ---
+# - freeIPA Services local Networks
+# ---
+
+echononl "\t\tFreeIPA Services local Networks"
+
+if [[ ${#freeipa_server_ip_arr[@]} -gt 0 ]] && ! $permit_between_local_networks; then
+   for _ip in ${freeipa_server_ip_arr[@]} ; do
+      $ip6t -A OUTPUT -p udp -d $_ip -m multiport --dports $freeipa_udp_in_ports -m conntrack --ctstate NEW -j ACCEPT
+      $ip6t -A OUTPUT -p tcp -d $_ip -m multiport --dports $freeipa_udp_in_ports -m conntrack --ctstate NEW -j ACCEPT
+      if $kernel_forward_between_interfaces && ! $permit_between_local_networks ; then
+         for _dev in ${local_if_arr[@]} ; do
+            $ip6t -A FORWARD -i $_dev -p udp -d $_ip -m multiport --dports $freeipa_udp_in_ports -m conntrack --ctstate NEW -j ACCEPT
+            $ip6t -A FORWARD -i $_dev -p tcp -d $_ip -m multiport --dports $freeipa_udp_in_ports -m conntrack --ctstate NEW -j ACCEPT
+         done
+      fi
+   done
+   echo_done
+else
+   echo_skipped
+fi
+
+
 # ---
 # - WakeOnLan only out into local Networks
 # ---